Security Directory

C

Creditea

creditea.ee

58

Creditea is a financial services provider offering transparent and flexible credit accounts primarily targeting consumers in Estonia and the Baltic region. The company is part of the IPF group and serves over 1.7 million customers across nine countries. Their services include credit lines and payment accounts accessible via web and mobile applications, emphasizing ease of use and transparency with no hidden fees. The website is professionally designed, mobile-optimized, and provides a user-friendly experience with clear navigation and relevant content in Estonian. Technical infrastructure leverages modern web technologies such as React and Next.js, with integrations for analytics and advertising through Google Tag Manager and Bing Ads. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website demonstrates a mature digital presence with good security and privacy practices but would benefit from clearer contact information and verified domain registration details.

M

Multitude Bank p.l.c.

ferratum.ee

56

Ferratum, operated by Multitude Bank p.l.c., is a well-established financial services provider specializing in quick and flexible online loans primarily targeting Estonian customers. The company is part of the larger Multitude Group, with a strong market presence since 2005 and operations in multiple countries. Their website offers a user-friendly experience with clear loan products, responsible lending information, and customer engagement through blogs and reviews. Technically, the site leverages modern frameworks such as Next.js and React, integrates third-party services like Salesforce chat and EmbedSocial reviews, and maintains good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure identification methods, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence with high trustworthiness and compliance with privacy regulations.

S

SmartPosti

smartpost.ee

64

SmartPosti is a leading parcel delivery service in Estonia, operating under the parent company Posti Group Oyj. The company offers a comprehensive range of parcel logistics services including parcel sending, receiving, self-service management, courier home delivery, and international shipments. Their extensive network and digital platform provide customers with flexible and convenient parcel handling options. The website demonstrates a mature digital infrastructure built on modern technologies such as Next.js and Contentful CMS, with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the website reflects a professional and trustworthy business with strong compliance to privacy regulations and a clear market position in the transportation sector.

C

Centra

centra.dev

60

Centra is a technology company specializing in providing developer-centric e-commerce solutions through APIs and headless commerce platforms. Their website offers comprehensive documentation, guides, and sandbox access aimed at developers and e-commerce businesses seeking to build custom commerce stacks. The company positions itself as a flexible and modern alternative in the e-commerce technology market, focusing on Direct-to-Consumer and Wholesale business models. Technically, the website leverages modern frameworks such as Next.js and React, with GraphQL APIs and integrations with HubSpot for forms and Leadfeeder for tracking. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. SEO practices are well implemented with appropriate meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses asynchronous script loading to optimize performance and security. However, it lacks published security policies, incident response information, and vulnerability disclosure mechanisms, which are important for transparency and trust. Privacy and cookie policies are also missing, indicating compliance gaps with GDPR and related regulations. Overall, Centra's website is professional and trustworthy, with strong business credibility and technical maturity. The main risks relate to privacy compliance and security transparency, which should be addressed to enhance user trust and regulatory adherence.

ClinEco is a specialized B2B clinical trials marketplace platform launched in 2021 by Cambridge Healthtech Inst., targeting sponsors, CROs, service providers, and clinical trial sites. The platform facilitates partner discovery, collaboration, and community engagement within the clinical research industry. It leverages a modern React/Next.js tech stack hosted on AWS, integrating popular marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and AdRoll. The website demonstrates good design quality, clear navigation, and mobile responsiveness, supporting a positive user experience and professional brand presentation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, aligning with the business identity and location.

Y

Yolla eSIM

yollaesim.com

64

Yolla eSIM is a telecommunications service provider specializing in offering eSIM data plans for over 91 countries worldwide. Their business model focuses on providing affordable mobile internet connectivity for travelers through a web platform and a dedicated mobile app. The company appears to be a small-sized entity founded in 2020, with a clear market position targeting global travelers seeking cost-effective data roaming solutions. Technically, the website is built on a modern React and Next.js stack with Material-UI components, delivering a good user experience and mobile optimization. However, some SEO and accessibility aspects could be improved. Security-wise, the site enforces HTTPS and has domain transfer protections but lacks visible security headers and explicit security policies, which could be enhanced to strengthen trust and compliance. Overall, the website is professional and functional with moderate trustworthiness and no blocking or WAF interference detected.

O

OneStream Software

onestreamsoftware.com

71

OneStream Software is a leading enterprise finance management platform that integrates finance and operational data with AI to enhance the strategic impact of CFOs. The company targets large enterprises and finance professionals seeking unified financial planning, consolidation, reporting, and analytics solutions. Their market position is strong, supported by recognized certifications such as SOC 2 and ISO 27001, and a comprehensive digital presence including customer success stories and analyst reports. Technically, the website is built on modern frameworks like Next.js and React, with robust performance, mobile optimization, and SEO practices. The security posture is solid, featuring HTTPS, security headers, and secure form handling, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a mature, professional enterprise software provider with a high level of trustworthiness and digital maturity.

K

Krulli kvartal

krulli.co

59

Krulli kvartal is a community-oriented urban development project based in Tallinn, Estonia, focused on creating a human-centered, inclusive, and sustainable urban space. The website showcases rental spaces, event venues, and community activities, targeting local residents, creatives, and startups. The project emphasizes collaboration and cultural engagement within the Kalamaja district. Technically, the website is built on a modern stack using Next.js and Strapi CMS, hosted on DigitalOcean, with good performance and mobile optimization. Security posture is strong with HTTPS and security headers, but lacks explicit privacy and cookie policies, which impacts privacy compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and incident response disclosures.

P

PDF Generator API

pdfgeneratorapi.com

74

PDF Generator API is a technology company specializing in providing an API service that automates PDF document creation from templates and JSON data. Their platform targets developers and businesses seeking to integrate PDF generation capabilities into their applications, offering a browser-based drag-and-drop editor for template management. The company appears to be a small-sized entity founded around 2017, with a focused niche in document automation technology. Technically, the website leverages modern web technologies including Next.js and React, supported by analytics and monitoring tools such as Mixpanel, Google Analytics 4, RudderStack, and Bugsnag. Hosting is likely on Amazon AWS infrastructure, indicated by the DNS servers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with granular user options, reflecting some privacy compliance efforts. However, the absence of DNSSEC, security headers, explicit privacy policy, terms of service, and contact information for security or incident response reduces the overall security posture. No WAF or blocking mechanisms were detected, and the domain registration is consistent and legitimate. Overall, the website presents a professional and functional service with room for improvement in privacy transparency, security hardening, and contact availability. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing comprehensive privacy and security policies, and providing clear contact channels for incident response.

C

Chronogolf by Lightspeed

chronogolf.com

73

Chronogolf by Lightspeed operates a leading online platform for booking golf tee times and managing golf course operations. The company targets golfers seeking convenient tee time reservations and golf course operators needing management software. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated Google Maps API, and comprehensive privacy and cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain www.chronogolf.com suggests privacy protection or alternative registration, but the website's professional quality and association with Lightspeed support its legitimacy. Overall, the site is well-optimized for performance, mobile use, and SEO, providing a trustworthy user experience.

G

G-Works Oy

g.works

65

G-Works Oy is a Finnish digital agency specializing in designing, implementing, and maintaining websites, e-commerce stores, and custom digital systems with over 15 years of experience. The company targets businesses and organizations seeking tailored digital solutions and positions itself as a reliable and professional service provider in the Finnish technology sector. Their website reflects a modern, professional design with clear navigation and strong branding consistency. Technically, the site is built using modern frameworks such as Next.js and React, hosted on Vercel, and employs Cloudflare DNS services. The site is optimized for performance, mobile responsiveness, and accessibility, with good SEO practices in place. Security-wise, the website enforces HTTPS, uses appropriate security headers, and implements a comprehensive cookie consent mechanism via Cookiebot, demonstrating good GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy of the domain registration, matching the company’s location and business claims. Overall, the website presents a trustworthy and professional digital presence.

P

PT Gramedia Asri Media

gramedia.com

67

Gramedia.com is the largest and most trusted online bookstore in Indonesia, operated by PT Gramedia Asri Media. The website offers a comprehensive catalog of books and related products, targeting Indonesian consumers interested in literature and educational materials. The business model is e-commerce retail with a strong emphasis on official stores and promotional campaigns. The company maintains a significant market position as a leading book retailer in the region. Technically, the website is built on modern frameworks such as React and Next.js, incorporating various analytics and marketing tools including Google Analytics, Hotjar, TikTok Pixel, and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and employs standard security headers, reflecting a solid security posture. However, the absence of a visible cookie consent mechanism and explicit security or incident response policies indicates room for improvement in privacy compliance and transparency. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by the company's established market presence and consistent branding. Overall, Gramedia.com is a credible and professionally managed e-commerce platform with a strong business foundation and good technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen its trustworthiness and regulatory adherence.

H

Härkila

harkila.com

75

Härkila is a well-established hunting apparel and equipment brand with a strong market presence in over 50 countries. The company offers a wide range of hunting clothes, footwear, and accessories targeting hunters and outdoor enthusiasts. The website reflects a professional e-commerce platform built with modern technologies such as React and Next.js, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website is trustworthy and credible but could improve transparency and security practices.

D

Domains By Proxy, LLC

zora.co

66

Zora is a technology company operating a niche social networking platform that integrates blockchain technology by making every post a coin. The platform targets users interested in social networking combined with crypto and blockchain features. The website is built using modern web technologies such as React and Next.js, hosted with Cloudflare DNS services, and employs analytics tools like Google Tag Manager and PostHog. The site is mobile optimized and has good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain status protections, though DNSSEC is not enabled, which is a recommended improvement. Privacy and cookie policies are present with consent mechanisms, but terms of service and explicit security policies are missing. No direct contact information or incident response channels are publicly available. The domain is privacy protected via Domains By Proxy, which is common for tech startups and blockchain projects, and the domain age is mature, supporting legitimacy. Overall, the website is professional and trustworthy with room for improvement in security disclosures and contact transparency.

L

LogoArchive • The world's largest historical logo book • Endless logo inspiration

logo-archive.org

60

LogoArchive is an online platform offering the world's largest historical logo book, providing over 4000 carefully curated logos with new additions daily. It targets design professionals and branding teams seeking logo inspiration. The website is built using modern technologies such as Next.js and React, integrating payment and analytics services like Stripe and Splitbee. While the site demonstrates good design quality and user experience, it lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. The absence of WHOIS data further limits the ability to fully assess domain legitimacy. Overall, the platform serves a niche market effectively but should enhance its security posture and privacy compliance to improve trustworthiness.

W

Wittl

wittl.co

62

Wittl is a SaaS company providing a modern applicant tracking system tailored for small and medium-sized teams. Their platform enables users to create job postings, customize career sites, manage applicant reviews, and collaborate efficiently during the hiring process. Positioned as an affordable and user-friendly alternative to legacy ATS solutions, Wittl targets SMBs seeking streamlined recruitment workflows. The website demonstrates a professional and consistent brand presence with clear service offerings and customer testimonials, reinforcing trust and market relevance. Technically, the site is built on a modern React and Next.js stack, delivering fast performance and excellent mobile optimization. The use of privacy-focused analytics (Plausible) aligns with contemporary data protection expectations. However, the absence of certain security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, reflecting good baseline security hygiene. The lack of published security policies or incident response contacts suggests an opportunity to enhance transparency and preparedness. The WHOIS data is privacy protected, which is typical for SaaS businesses but limits external verification of registrant details. Overall, Wittl presents a credible and well-executed online presence with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would further strengthen user trust and regulatory alignment.

I

Infopank

infopank.ee

51

Infopank is Estonia's largest business information platform, providing a comprehensive suite of services including competition reports, marketing lists, sales agent tools, certificates, data interfaces, debt registers, and background information. The platform targets Estonian businesses and professionals seeking reliable business data to support growth and decision-making. Technically, the website leverages modern frameworks such as Next.js and React, integrates Google Tag Manager, Facebook Pixel, Hotjar, and a consent management platform (Didomi), indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit privacy and security policies are not found in the provided content. Overall, the site is professional, functional, and trustworthy, with room for improvement in privacy compliance documentation and accessibility.

M

Mineflow

mineflow.ai

49

Mineflow is a newly founded AI-driven mineral exploration startup focused on transforming exploration site data into accurate 3D and 2D models of mineral deposits such as gold and copper. The company targets mining professionals and geologists with a SaaS platform leveraging advanced AI technologies. The website is built using modern web technologies including React and Next.js, providing a good user experience with responsive design and clear navigation. Analytics are implemented via PostHog, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, which are critical for compliance and trust. The domain is privacy protected and very new, consistent with a startup profile. Overall, the website is professional but would benefit from enhanced privacy compliance and security hardening.

V

VideoGen, Inc.

videogen.io

59

VideoGen, Inc. operates a cutting-edge AI-powered video generation platform designed to simplify and accelerate video creation for content creators, marketers, educators, and businesses. The platform offers a wide range of AI-driven features including script writing, voiceover generation, avatar integration, and multi-format video outputs tailored for social media and professional use. Backed by Y Combinator and trusted by millions, VideoGen positions itself as a leading SaaS solution in the AI video generation market. Technically, the website is built on modern web technologies including React and Next.js, hosted and secured via Cloudflare. It demonstrates excellent performance, mobile optimization, and SEO practices. The security posture is strong with HTTPS enforcement and appropriate security headers, although privacy compliance could be enhanced by implementing explicit cookie consent mechanisms. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The domain uses privacy protection for WHOIS data, which is justified for a startup. The business credibility is high, supported by professional branding, testimonials, and a comprehensive affiliate program. Overall, VideoGen presents a mature digital presence with room for minor improvements in privacy transparency and security policy disclosures.

T

Tatva Labs Inc.

cekura.ai

63

Cekura, operated by Tatva Labs Inc., is a technology company specializing in AI voice agent testing and observability solutions. The company offers a SaaS platform that enables enterprises and conversational AI companies to efficiently test, monitor, and improve their AI voice agents. Positioned as a trusted partner with backing from Y Combinator and strategic partnerships with Cisco, Cekura serves over 50 conversational AI companies globally. Their platform supports scenario simulation, persona emulation, and real-time alerting to ensure AI agents perform reliably in complex conversational workflows. Technically, the website is built on modern frameworks such as Next.js and React, with integrated analytics via PostHog and scheduling via Cal.com, demonstrating a mature digital infrastructure with fast performance and excellent mobile optimization. Security-wise, the company holds SOC2 Type2 and HIPAA compliance certifications, indicating a strong commitment to data protection and regulatory adherence. However, the site lacks explicit security headers and a public vulnerability disclosure, which are recommended for enhanced security posture. Overall, Cekura presents a professional, trustworthy, and technically sound presence in the AI voice technology market.

Cleva is a fintech startup founded in 2023 that provides US-based dollar accounts and virtual USD cards to global users, including non-US residents. The company positions itself as a solution for cross-border USD banking, enabling users to receive payments from platforms like Upwork, Deel, and Amazon, convert currencies, and make transfers with low fees. Supported by Y Combinator and featured in reputable media outlets, Cleva demonstrates a growing market presence in the fintech space. The website is built on modern technologies such as React and Next.js, hosted on AWS infrastructure, and optimized for mobile devices with good performance and SEO practices. Security posture is solid with HTTPS and domain protections, though improvements are needed in DNSSEC and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. Overall, the site is professional and trustworthy but should enhance transparency and security policies to improve compliance and user trust.

N

Nowadays AI, Corp.

getnowadays.com

62

Nowadays AI, Corp. operates a technology-driven platform that leverages artificial intelligence to streamline corporate event planning. The company positions itself as an in-house event planner for businesses, offering services such as venue search, negotiation with venues globally, and travel agency capabilities certified by IATA. The platform targets corporate clients seeking efficient and hassle-free event organization, supported by notable trust signals including Y Combinator backing and press coverage. Technically, the website is built using modern frameworks such as Next.js and React, with integrations like Intercom for customer engagement and embedded YouTube videos for marketing. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS (implied by the URL), but no explicit security headers were detected in the HTML content. Privacy and terms of service pages are present, indicating some compliance with data protection regulations such as GDPR. However, no cookie consent mechanism or detailed security policies were found, suggesting areas for compliance improvement. Overall, the risk profile is moderate with no critical security issues detected. The lack of public WHOIS data is typical for startups and does not detract from legitimacy given the professional branding and external validations. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing more detailed security and incident response policies to strengthen trust and compliance.

O

Omnistrate

omnistrate.com

73

Omnistrate is a technology company specializing in providing a modular control plane as a service for SaaS products, enabling rapid build, deployment, and scaling of multi-tenant B2B applications. The platform emphasizes AI-powered infrastructure management, SaaS billing, and global deployments, targeting startups and enterprises seeking to accelerate SaaS product delivery. The website is professionally designed using modern frameworks such as Next.js and Material UI, hosted via Cloudflare, and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS and basic security headers, though improvements are recommended in DNSSEC and advanced security headers. Privacy compliance is currently lacking, with no visible privacy or cookie policies or consent mechanisms. Contact information and incident response details are not explicitly provided, which may impact user trust and compliance. Overall, the domain registration is consistent with the business profile, and no blocking or WAF challenges were detected, allowing a full content analysis.

S

Speedoc Singapore

speedoc.com

62

Speedoc Singapore operates as a healthcare service provider specializing in delivering medical services such as doctor home visits and telemedicine consultations within Singapore. The company positions itself as a convenient and accessible healthcare solution, bringing doctors, nurses, ambulance, and medicine directly to patients' locations. The website reflects a medium-sized enterprise with a focus on the Singapore market and healthcare sector. Technically, the site is built using modern web technologies including React and Next.js, with integration of popular analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight. The site is mobile optimized and presents a professional user experience with good SEO practices. Security-wise, the website enforces HTTPS and uses hCaptcha for bot protection, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. The WHOIS data for the subdomain sg.speedoc.com is unavailable, which is typical for subdomains, but the main domain's registration details are not provided here. Overall, the website is credible and functional but could enhance privacy compliance and security posture further.

A

Alma Career

lmc.eu

67

Alma Career is a prominent HR and recruitment services provider operating primarily in Czechia and across Europe. The company offers a comprehensive suite of services including job portals, online education platforms, recruitment management tools, employee engagement surveys, and salary benchmarking. Their market position is strong, supported by multiple well-known brands such as Jobs.cz and Platy.cz, serving a broad audience of HR professionals, employers, and job seekers. The website reflects a mature digital presence with modern technologies and a professional design. Technically, the website is built using Next.js and React frameworks, leveraging modern web standards and optimized for performance and mobile responsiveness. The use of Google Tag Manager and Analytics indicates a moderate level of user tracking balanced with privacy compliance. The site employs security best practices including HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, although the strong brand presence and consistent business information mitigate this concern. Overall, the risk is moderate with recommendations to enhance transparency around security policies and incident response. Strategically, Alma Career should focus on publishing detailed security and incident response policies, consider a vulnerability disclosure program, and continue to monitor domain registration details to maintain trust. Enhancing accessibility and expanding data retention disclosures would further improve compliance and user trust.

W

Wi s.r.o.

pizzacoloseum.cz

46

Pizza Coloseum is a Czech hospitality business specializing in Italian cuisine, operating multiple restaurant locations primarily in Prague, Ostrava, and Teplice. The company emphasizes tradition and authentic Italian flavors, targeting local customers and visitors seeking quality dining experiences. The business model is based on brick-and-mortar restaurants with an integrated online reservation system, positioning itself as a regional restaurant chain with a medium-sized footprint. Technically, the website is built using modern web technologies including React, Next.js, and Apollo GraphQL, hosted on a Czech provider (WEDOS). The site includes a comprehensive cookie consent mechanism powered by Cookiebot, reflecting a moderate level of digital maturity and privacy compliance. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain is long-established (since 1999) and registration data is consistent with the business location, supporting legitimacy. Overall, the website presents a professional and trustworthy online presence with room for improvement in privacy policy publication, security header implementation, and contact information transparency. Strategic recommendations include enhancing security headers, publishing clear privacy and terms documents, and adding incident response contacts to strengthen compliance and trust.

Z

Zeppelin GmbH

zeppelin-systems.com

57

Zeppelin Systems, a division of Zeppelin GmbH, specializes in customized solutions for bulk material handling and plant engineering, serving industries such as food, chemicals, plastics, and recycling. The company offers a comprehensive portfolio including engineering, components, and services, positioning itself as a key player in the manufacturing sector with a strong B2B focus. The website reflects a mature digital presence with modern technologies like Next.js and AWS hosting, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in DNS security and security headers. Overall, the site demonstrates high professionalism and trustworthiness, supported by clear contact information and legal compliance.

T

TeeTime SE

teetime.cz

59

TeeTime SE operates a specialized online platform focused on golf course discovery and booking, primarily serving the Czech Republic and broader European markets. The website offers a comprehensive marketplace for golf-related products, memberships, and services, positioning itself as a leading player in the golf hospitality sector. The platform supports both casual and competitive golfers with seamless reservation capabilities and additional offerings such as golf trails and tournaments. Technically, the site leverages modern web technologies including React and Next.js, hosted behind Cloudflare, ensuring a responsive and performant user experience across web and mobile platforms. Security measures such as HTTPS and standard security headers are in place, though explicit cookie consent mechanisms and dedicated security policies are absent. Overall, the site demonstrates a mature digital presence with good business credibility and moderate privacy compliance.

V

VAKOVAKO | Endowment fund

nf2091.org

62

VAKOVAKO is a Czech Republic-based non-profit endowment fund operating a global donation platform focused on environmental and humanitarian causes. The platform connects donors with carefully vetted nonprofits working in areas such as rainforests, oceans, biodiversity, endangered species, and humanity. The business model emphasizes transparency, with 100% of donations going directly to nonprofits and audited bank accounts. The platform supports donations via a mobile app available on iOS and Android, facilitating easy and fast contributions with no minimum or maximum limits. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Stripe payments, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is well-optimized for mobile devices, fast loading, and includes accessibility features. Security best practices are observed with HTTPS, security headers, and reCAPTCHA integration, though no explicit security policy or incident response information is published. The WHOIS data for the domain is unavailable or malformed, indicating privacy protection which is common and justified for non-profit organizations. Despite this, the website's transparency, presence of official policies, and contact information support its legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly platform for charitable donations. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.

K

Klépierre Management Česká Republika s.r.o.

klepierre.cz

54

Klépierre Management Česká Republika s.r.o. operates prominent shopping centers in the Czech Republic, including Nový Smíchov in Prague and Plzen Plaza in Plzeň. The company is part of the larger Klépierre group based in France, specializing in retail real estate management. Their website provides information about their centers, compliance mechanisms including a whistleblowing system, and cookie consent management, reflecting a commitment to regulatory compliance and user privacy. Technically, the website is built using modern web technologies such as Next.js and React, hosted via Gandi registrar's infrastructure. The site includes a comprehensive cookie consent mechanism using tarteaucitron.js and integrates Google Tag Manager for analytics. The website is mobile-optimized and provides a good user experience with clear navigation and branding consistency. From a security perspective, the site enforces HTTPS and uses a high privacy cookie consent mode. It features a whistleblowing system for incident reporting, demonstrating a mature compliance posture. However, explicit security headers and a dedicated security policy page are absent, and no vulnerability disclosure or security.txt file was found. These gaps suggest room for improvement in formalizing security communication and transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The domain age and WHOIS data align with the business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to strengthen security posture and trust.

D

Dr. Oetker

oetker.cz

63

Dr. Oetker Czech Republic operates a well-designed and content-rich website focused on baking recipes, desserts, and product sales. The site targets home bakers and families, offering recipe inspiration and an e-commerce platform for purchasing products. The brand is well-established with over 100 years of history, reflected in consistent branding and professional content. Technically, the website uses modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though explicit security headers and privacy policies are lacking. WHOIS data is missing, which reduces trustworthiness but the website's content and branding strongly suggest legitimacy. Overall, the site is professional and user-friendly but could improve transparency on privacy and security policies.

T

Tervise ja Heaolu Infosüsteemide Keskus

terviseportaal.ee

64

Terviseportaal is the official Estonian government digital health portal operated by the Tervise ja Heaolu Infosüsteemide Keskus (TEHIK). It provides comprehensive health-related information and services to Estonian residents, including access to personal health data, appointment booking, prescriptions, health certificates, and screening programs. The portal is well-positioned as the primary national health service gateway, integrating with key partners such as Tervisekassa and the Estonian Health Development Institute. The website demonstrates a high level of digital maturity with modern technologies like React and Next.js, excellent mobile optimization, and good accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Overall, the portal is trustworthy, professional, and compliant with GDPR and cookie regulations, serving a large user base effectively.

F

Funky Pigeon

funkypigeon.com

70

Funky Pigeon is a UK-based e-commerce retailer specializing in personalized greeting cards, gifts, and flowers. The company operates under the parent company WH Smith PLC, positioning itself as a significant player in the UK retail market for personalized gifting solutions. The website offers a broad range of products tailored for various occasions, targeting consumers seeking unique and personal gift options. Technically, the site is built using modern web technologies including React and Next.js, with integrations for customer data platforms and marketing analytics, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs standard security headers, and provides comprehensive privacy and cookie policies with consent mechanisms, indicating a strong commitment to user data protection. However, the absence of WHOIS registration data is a notable anomaly, though the overall site professionalism and parent company association mitigate concerns. Strategic recommendations include publishing explicit security policies and incident response contacts, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security posture.

R

Rahva Raamat

rahvaraamat.ee

56

Rahvaraamat.ee is the leading Estonian bookstore chain offering a comprehensive selection of books and media products through both online and physical retail channels. The company is well-established with a domain age since 2010 and operates under Zone Media OÜ. Their website is built on modern technologies such as Next.js and React, providing a responsive and user-friendly experience. The integration of Cookiebot ensures GDPR compliance with a detailed cookie consent mechanism. Security posture is strong with HTTPS enforced and appropriate security headers in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates a mature digital presence with extensive analytics and advertising integrations, supporting a robust e-commerce business model.

V

Vejle Idrætshøjskole

vih.dk

67

Vejle Idrætshøjskole is a Danish educational institution specializing in sports-focused high school courses, targeting young people in sabbatical years or summer courses. The website presents a professional and modern digital presence built on React and Next.js, with good mobile optimization and SEO practices. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance and user privacy awareness. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly visible. WHOIS data is unavailable, which is typical for Danish domains, but no suspicious indicators are found. Overall, the site reflects a trustworthy and well-managed educational service with moderate to good digital maturity.

Y

Yaga

yaga.co.za

62

Yaga is a South African online marketplace specializing in preloved and new fashion items, providing a platform for users to buy and sell clothing safely. The website targets consumers interested in sustainable fashion and sellers looking to monetize their preloved items. The platform integrates secure payment methods and multiple delivery partners, enhancing user trust and convenience. Technically, Yaga employs modern web technologies including React, Next.js, and Material-UI, with integrations for analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses secure payment gateways, but lacks explicit security headers and published privacy or terms policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security policies would strengthen its posture.

K

Klarvinduer

klarvinduer.dk

65

Klarvinduer.dk is a Danish retail website specializing in custom-made windows and doors, offering high-quality products at factory prices with discounts up to 60%. The business targets both DIY consumers and professional customers, positioning itself competitively in the Nordic and European markets with sister sites in multiple countries. The website is built on modern web technologies including React and Next.js, with content managed via DatoCMS and cookie consent managed by Cookiebot. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service policies. Contact information is limited to a contact form without explicit emails or phone numbers. The domain registration is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the site.

W

Wunderkraut

wunder.io

76

Wunder is a Finnish digital solutions company specializing in digital transformation, software development, data analytics, and cloud hosting services. Established in 2012, the company serves a diverse client base including public sector organizations and enterprises, positioning itself as a trusted partner in delivering user-centered digital services. The website reflects a mature digital presence with comprehensive content, client success stories, and clear service offerings. Technically, the site leverages modern frameworks such as Next.js and Drupal CMS, hosted on reliable platforms with Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be explicitly added. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website demonstrates professionalism, trustworthiness, and a solid digital maturity level.

D

Decacorn Capital

decacorncapital.com

66

Decacorn Capital is a Singapore-based venture capital firm specializing in funding innovative technology startups and disruptive companies. The firm positions itself as a backer of 'rebel minds' aiming to create new opportunities and unlock possibilities in various sectors including AI, cybersecurity, fintech, and more. Their portfolio includes a mix of unicorns, decacorns, and acquired companies, demonstrating a strong market presence and investment acumen. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and comprehensive security headers, though there is room for improvement in privacy compliance and incident response transparency. Overall, the site reflects a professional and credible investment firm with a solid digital infrastructure.

Enefit Green is a leading renewable energy producer in the Baltic Sea region, specializing in wind and solar energy production across Estonia, Latvia, Lithuania, Poland, and Finland. The company operates a substantial portfolio of wind parks, solar power plants, and other renewable energy assets, positioning itself as the largest wind energy producer in the Baltics. Their business model focuses on sustainable energy production and regional energy independence, supported by significant recent investments and growth. Technically, the website is built on modern frameworks like React and Next.js, hosted with Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. The site implements strong privacy and cookie consent mechanisms, reflecting good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and providing incident response contacts to further strengthen trust and compliance.

Bolt Technology OÜ operates a leading European mobility superservice platform offering ride-hailing, food and grocery delivery, car and scooter rentals, and business travel solutions. The company is well-positioned in the transportation and technology sectors with a large global footprint across 600+ cities and 50+ countries. Their digital presence is robust, leveraging modern web technologies such as Next.js and React, with strong SEO, mobile optimization, and accessibility features. The website demonstrates a high level of professionalism and branding consistency, supported by comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Bolt's website and digital infrastructure reflect a mature and trustworthy business with a strong market presence and good compliance practices.

J

John Robertson Architects

jra.co.uk

61

John Robertson Architects is a reputable architectural practice operating primarily in the UK with offices in London, Edinburgh, and Lodz. They specialize in commercial, residential, and mixed-use architectural projects, offering design, planning, and project delivery services. The firm positions itself as a leading player in the architectural sector with a strong portfolio and industry recognition. Technically, the website is built on modern frameworks such as Next.js and uses Sanity CMS, delivering a fast, mobile-optimized, and accessible user experience. The site employs HTTPS and a cookie consent mechanism, indicating good privacy compliance. However, the absence of WHOIS data for the domain www.jra.co.uk due to a naming rules violation introduces some uncertainty about domain registration legitimacy. Security posture is generally strong with no visible vulnerabilities, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, though the domain registration anomaly should be clarified to enhance credibility.

A

Altex

altex.ro

48

Altex.ro is a well-established Romanian e-commerce platform specializing in the sale of electronics and household appliances. Founded in 2001, it holds a strong market position as a leading retailer in Romania, offering a wide range of products including phones, laptops, TVs, and home appliances. The website features a comprehensive product catalog and supports fast delivery and installment payment options, targeting Romanian consumers seeking competitive prices and convenience. Technically, the website is built using modern web technologies such as React and Next.js, hosted on Akamai's infrastructure, and integrates analytics and marketing tools like Google Tag Manager, Hotjar, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected. However, the absence of a visible privacy policy, terms of service, and direct contact information for security incidents indicates areas for improvement in compliance and transparency. Overall, Altex.ro demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic enhancements in privacy documentation, security policy publication, and contact transparency would further strengthen its security posture and regulatory compliance.

R

Rephop

rephop.com

74

Rephop is a specialized SaaS provider offering web-based group consolidation, reporting, and planning software tailored for CFOs and finance professionals. Established in 2013, it has positioned itself as a trusted solution for simplifying complex financial consolidation processes across multiple subsidiaries and currencies. The platform emphasizes ease of use, powerful features such as intergroup transaction reconciliation, non-controlling interest calculations, and compliance with IFRS and US GAAP standards. Its market presence is supported by customer testimonials and a clear pricing model targeting small to medium-sized businesses and enterprises. Technically, Rephop leverages modern web technologies including Next.js and React, hosted on Vercel with Cloudflare DNS services. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Analytics tools such as Vercel Analytics and Google Tag Manager are used for user behavior tracking, though privacy compliance could be enhanced with explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a consistent and legitimate domain registration history aligned with the company's operational timeline. Overall, Rephop demonstrates a strong business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enabling DNSSEC to bolster trust and regulatory adherence.

E

Eklips Digital

eklips.se

57

Eklips Digital is a specialized provider of subscription-based corporate websites, targeting listed and non-listed companies primarily in the Nordic region. Founded in 2011, the company offers a Corporate Website as a Service (CWaaS) platform that includes web development, design, branding, hosting, maintenance, security, and support services. Their market position is strengthened by serving 10% of Nasdaq Stockholm Main Market companies and delivering over 300 websites with a 99.9% uptime guarantee. The website is professionally designed using modern technologies such as Next.js and React, reflecting a mature digital infrastructure. However, the absence of WHOIS data for the domain www.eklips.se raises concerns about domain registration legitimacy, which should be verified. Security posture is moderate with no visible vulnerabilities but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a trustworthy and professional business presence but requires improvements in compliance and domain legitimacy verification.

A

Afternic (GoDaddy Operating Company, LLC)

ryapolov.com

70

The website ryapolov.com is a domain sales landing page hosted on the Afternic platform, a domain aftermarket service owned by GoDaddy Operating Company, LLC. It offers the domain ryapolov.com for sale with options to buy outright or lease to own. The site targets domain buyers including businesses and individuals seeking premium domain names. The business model is focused on domain brokerage and sales, leveraging GoDaddy's extensive infrastructure and brand recognition. The platform provides contact forms and phone support to facilitate domain price inquiries and transactions. Technically, the site is built using modern web technologies including React and Next.js, hosted on Amazon AWS infrastructure. It employs HTTPS with strong security headers and integrates third-party services such as Klarna for payments and Trustpilot for reputation. The site is optimized for performance and mobile responsiveness, with good SEO and basic accessibility features. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature digital presence. From a security perspective, the website demonstrates strong posture with enforced HTTPS, secure forms protected by reCAPTCHA, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain reduces transparency but is likely due to privacy protection or query limitations. Overall, the site is legitimate, professional, and secure, suitable for its domain sales purpose. The overall risk assessment is low, with recommendations to improve transparency by publishing security policies and incident response details, enhancing accessibility, and maintaining regular audits of third-party scripts. These steps will further strengthen trust and compliance in the competitive domain aftermarket space.

A

AS G4S Eesti

g4s.ee

68

AS G4S Eesti is a leading security services provider in Estonia, operating as part of the international G4S group. The company specializes in a broad range of security solutions including home security, video surveillance, manned guarding, fire safety, event security, and training services. Their website reflects a mature and professional organization with a strong market position and a comprehensive service portfolio targeting both private individuals and business clients. The company has been established since 2010, with a consistent domain registration and a clear digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with a CMS likely based on Strapi, hosted on reliable infrastructure including AWS and Ultradns. The site is well-optimized for mobile devices, SEO, and accessibility, providing a positive user experience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and integrates trusted third-party services like LiveChat and Cookiebot. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance with privacy regulations such as GDPR.

Entigo is a technology company specializing in container management platforms, site reliability engineering as a service, and hands-on training for development and platform teams. Positioned as a niche B2B provider, Entigo targets developers and enterprises adopting cloud-native containerized infrastructure. The company demonstrates strong market positioning through partnerships with AWS, Google Cloud, and Kubernetes certifications, supported by ISO 9001 quality management certification. Technically, the website is built on modern frameworks including Next.js and Strapi CMS, hosted on Vercel, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for its target audience.

H

HUB88 Limited

hub88.io

62

HUB88 Limited operates a technologically advanced casino games aggregation platform, offering a single API to integrate over 12,000 games from more than 100 suppliers. The company positions itself as the fastest aggregator in the iGaming industry, targeting operators and suppliers seeking efficient and scalable integration solutions. Their platform includes a powerful back office, personalized player content, and a payments platform, supported by 24/7 live customer support and transparent platform status monitoring. The company is licensed and regulated by the Malta Gaming Authority, enhancing its credibility in the regulated gaming market. Technically, the website is built using modern frameworks such as Next.js and React, hosted behind Cloudflare DNS and CDN services. It employs analytics tools including Google Tag Manager and LinkedIn Insight Tag, indicating a mature digital marketing and analytics setup. The website is well-optimized for mobile devices, has good accessibility features, and demonstrates strong SEO practices. From a security perspective, the site enforces HTTPS, uses standard security headers, and does not expose sensitive data. However, it lacks a visible cookie consent mechanism and formal security or incident response policies, which are areas for improvement to enhance compliance and trust. The domain registration is consistent and legitimate, with no privacy protection masking ownership, and a long registration period indicating business stability. Overall, HUB88 presents a professional, secure, and credible online presence with minor gaps in privacy compliance and formal security disclosures. Strategic improvements in these areas would further strengthen their market position and regulatory adherence.

L

Location Unit

locationunit.ee

42

Location Unit is a specialized service provider offering location rental and management services primarily for TV commercials, films, and photo shoots. Established in 2014 and based in Estonia, the company targets media production professionals in the Baltic region. Their website reflects a focused business model with clear service categories including green products, facilities, vehicles, and equipment rentals. The company maintains a consistent brand presence and leverages modern web technologies such as Next.js and React for their digital platform. The site is mobile-optimized and performs well, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is weak due to the lack of privacy and cookie policies or consent mechanisms. The WHOIS data confirms domain legitimacy with a consistent registration history and alignment with the business location. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to strengthen trust and compliance.