Security Directory

M

Monaco Tribune

monaco-tribune.com

51

Monaco Tribune is a professional online news media outlet focused on delivering local news, cultural events, sports, and societal updates related to Monaco. The website targets residents and visitors interested in Monaco's current affairs and lifestyle, offering multilingual content and a city guide. The business model relies primarily on advertising revenue and content distribution through social media channels. Technically, the site is built on WordPress with modern SEO and performance optimization plugins, ensuring good loading speeds and mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to enhance compliance and trust.

M

Monaco Info

monacoinfo.com

57

Monaco Info is a small media company focused on delivering news, video content, and live streaming services centered around Monaco. The website is well-structured, professionally designed, and targets residents and visitors interested in local news and events. The technical infrastructure is based on WordPress with modern web technologies, providing a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit privacy or security policies are published, which is a compliance gap. The domain is long-established and consistent with the business claims, enhancing trustworthiness.

P

Peace and Sport

peace-sport.org

45

Peace and Sport is an established international non-profit organization founded in 2007, dedicated to promoting peaceful, inclusive, and equitable communities through sport. The organization leverages a network of high-profile sports champions and global partnerships to advance peacebuilding initiatives worldwide. Their website reflects a professional and consistent brand image, with clear messaging and active engagement channels including social media and event forums. Technically, the site is built on WordPress with modern plugins and themes, providing good mobile responsiveness and SEO optimization. Security posture is strong with HTTPS and reCAPTCHA integration, though explicit security headers and privacy policies are lacking. The absence of WHOIS data limits domain trust verification but does not detract significantly from the organization's credibility given its public profile and external trust signals. Overall, the website serves as an effective platform for advocacy and stakeholder engagement in the peace through sport sector.

V

Valgeranna Veinitall

veinitall.ee

43

Valgeranna Veinitall is a small Estonian hospitality business specializing in local wine tasting, event hosting, and wine sales. The website presents a niche local offering with a focus on historic ambiance and quality wine experiences near Pärnu, Estonia. The business appears to be newly established in 2021 and targets local visitors and wine enthusiasts. Technically, the website is built on WordPress using the Divi theme and WooCommerce for e-commerce capabilities. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no WAF blocking detected, but lacks advanced DNS security (no DNSSEC) and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

V

V360 agency

vvunk.ee

43

V360 Agency OÜ is a small Estonian digital agency specializing in web development, e-commerce solutions, branding, and full digital marketing services. The company positions itself as a creative and professional partner for businesses seeking to elevate their digital presence. Their website showcases a portfolio of projects and client testimonials, indicating a trusted market position within their niche. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

R

Riigimetsa Majandamise Keskus

loodusegakoos.ee

51

Riigimetsa Majandamise Keskus (RMK) is a government agency responsible for managing Estonia's state-owned forests and natural ecosystems. The organization focuses on sustainable forest growth, nature conservation, providing outdoor recreational opportunities, and nature education. RMK holds a strong market position as the largest forest management entity in Estonia, serving both the general public and specialists. Their business model revolves around state stewardship and generating revenue through forest management and wood sales. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to diverse audiences. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and Redis caching, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring detailed cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Security posture is solid with HTTPS enforced and secure cookie practices, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, RMK's website demonstrates high professionalism, trustworthiness, and effective communication of its mission and services.

T

Piletid sinu teekonnale

tpilet.ee

60

Tpilet.ee is an Estonian online platform specializing in the sale of bus tickets and providing bus timetable information. It serves primarily bus travelers within Estonia, offering services such as one-way and return ticket purchases, ticket returns, and corporate client agreements. The website is positioned as a key player in the Estonian transportation ticketing market, leveraging e-commerce to facilitate travel planning and ticketing. Technically, the website is built using modern web technologies including React and JavaScript, with integration of analytics tools such as Amplitude and Google Analytics. The site demonstrates moderate performance and good mobile optimization, although accessibility features are basic. The use of HTTPS ensures secure communications, and cookie consent mechanisms are in place to comply with basic privacy requirements. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the business, indicating a legitimate and consistent domain registration. Overall, the website presents a professional and functional platform with room for improvement in privacy compliance, security best practices, and accessibility. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

Z

Zone Media OÜ

wland.ee

48

Wland.ee is a regional hospitality and event platform focused on promoting Läänemaa, Estonia as an ideal destination for team events, seminars, and corporate gatherings. The website aggregates information about seminar rooms, team activities, and leisure options, targeting businesses and organizations seeking venues and experiences in the region. The business is relatively new, founded in 2023, and operated by Zone Media OÜ. The platform positions itself as a comprehensive resource for event planning in a natural and tranquil environment, emphasizing quality services and cultural experiences. Technically, the website is built on WordPress using the Kadence theme and Yoast SEO plugin, with Google Tag Manager integrated for analytics and CookieYes for cookie consent management. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting and domain registration are consistent with the business entity, though DNSSEC is not enabled, and some security headers are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, indicating awareness of GDPR requirements. Contact information is primarily via email and web forms, with no phone numbers or physical addresses explicitly provided. Overall, Wland.ee presents a professional and trustworthy platform for its niche market, with room for improvement in security hardening and expanded compliance documentation. The domain registration and website content align well, supporting legitimacy and business credibility.

A

Ask Any Difference

trackduck.com

71

Ask Any Difference is a small technology-focused informational website founded in 2019, providing a broad range of articles, guides, and tutorials related to computer software and technology. The site targets individuals interested in improving their computer skills and understanding software programs. The business model centers on content publishing with monetization likely through affiliate marketing and advertising. Technically, the site is built on WordPress with common performance and SEO optimizations, including caching and structured data markup. The hosting and domain registration are consistent and legitimate, with no privacy protection used, indicating transparency. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The site integrates multiple third-party marketing and analytics tools, including Google Tag Manager and JourneyMV scripts. Overall, the website is functional, content-rich, and moderately secure but would benefit from enhanced security practices and privacy compliance improvements.

SODECA is a Portuguese manufacturer specializing in industrial ventilation and exhaust solutions, including smoke control, tunnel ventilation, stair pressurization, and indoor air quality improvement. The company maintains a strong international presence with multiple country-specific websites, targeting industrial clients and technical professionals. Their business model combines manufacturing with direct sales, supported by online tools and technical consultancy services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and integrates analytics and advertising tools like Google Analytics, Google Tag Manager, and Bing Ads. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. Security-wise, the site uses HTTPS and a cookie consent mechanism but lacks explicit security headers and published security policies or incident response contacts. Overall, the security posture is solid but could be improved by implementing additional security headers, publishing a security policy, and establishing a vulnerability disclosure process. The domain WHOIS data aligns well with the business claims, supporting legitimacy. The website provides comprehensive contact information and privacy compliance features, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and security policies, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

S

Sigma Group

sigma.se

66

Sigma Group is a large, well-established technology consulting firm headquartered in Sweden, with approximately 4,600 employees across eleven countries. The company focuses on enhancing customer competitiveness through technological expertise and innovative solutions. Owned by Danir AB, Sigma operates multiple subsidiaries specializing in various technology and industry sectors. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. The technical infrastructure leverages modern JavaScript frameworks (Vue.js), and integrates multiple analytics and marketing tools, indicating a strong digital marketing strategy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies added. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, Sigma Group presents a trustworthy and credible business with a strong online presence.

V

Visit Elva

visitelva.com

48

Visit Elva operates as a regional tourism information portal focused on promoting the Elva area in Estonia. The website provides visitors with information on local attractions, events, accommodation, dining, and active leisure opportunities. It targets tourists and visitors seeking authentic experiences in the Elva region, positioning itself as a key resource for regional tourism promotion. The business model centers on providing curated content and event promotion to enhance visitor engagement and regional visibility. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. Hosting and domain registration are consistent with the business location and purpose. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks DNSSEC and advanced security headers, which could enhance its security posture. No explicit security policies or incident response contacts are published, indicating room for improvement in transparency and readiness. Overall, Visit Elva presents a professional and trustworthy online presence with solid content and technical foundations. Strategic enhancements in security policies, DNS security, and incident response disclosures would further strengthen its risk management and compliance posture.

R

Refrion

refrion.com

70

Refrion is a leading company specializing in industrial refrigeration and ventilated equipment for industrial use worldwide. As part of the LU-VE Group, it holds a strong market position in the energy and manufacturing sectors, offering a range of products including dry coolers, condensers, and batteries. The website reflects a professional B2B business model targeting industrial clients requiring advanced cooling solutions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates key marketing and analytics tools such as Google Analytics and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, supporting a good user experience and trustworthiness. The lack of WHOIS data for the subdomain is consistent with it being a subdomain of luvegroup.com, which aligns with the corporate structure. Strategic recommendations include enhancing security headers, expanding contact information visibility, and maintaining compliance with evolving privacy regulations.

Airvent Légtechnikai Zrt. is a well-established Hungarian manufacturer specializing in innovative ventilation and air handling products. Founded in 1999, the company offers a broad portfolio of HVAC-related products and services, including design support, customer service, and commissioning. Their market position is solid within Hungary and surrounding regions, targeting professional customers in industrial and residential ventilation sectors. The website reflects a mature digital presence with multilingual support and detailed product information. Technically, the site employs modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, with secure HTTPS and CSRF protections on forms. However, explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, secure, and trustworthy, supporting the company's credibility and business operations.

E

Ettevõtlusnädal 2025

ettevotlusnadal.ee

39

Ettevõtlusnädal 2025 is a prominent Estonian nationwide entrepreneurship event organized annually by regional development centers to foster entrepreneurial spirit and support business startups. The website serves as an information hub for event programs, regional trainings, and inspirational content targeting entrepreneurs and aspiring business owners. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and security, including Google Tag Manager and reCAPTCHA. The site is well-optimized for mobile and SEO, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site reflects a trustworthy and professional digital presence for a non-profit event organization.

S

Solo Build It!

sitesell.com

60

Solo Build It! (SBI!) is an online platform focused on enabling solopreneurs to build profitable online businesses rather than just websites or blogs. The platform targets individual entrepreneurs seeking comprehensive tools and guidance to establish and grow their online presence. The website is professionally designed with good SEO and mobile optimization, leveraging modern web technologies and third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. However, the absence of WHOIS registration data and domain ownership details introduces uncertainty regarding domain legitimacy. Security posture is weak due to lack of visible security headers and absence of explicit privacy or cookie policies, which also impacts privacy compliance. Overall, the site presents a moderate risk profile with room for improvement in transparency and security.

V

Veinitee.ee

veinitee.ee

40

Veinitee.ee is a small Estonian hospitality business focused on promoting local wineries and wine tourism through a collaborative network of producers. The website serves as a portal to explore various wine routes and wineries across Estonia, targeting wine enthusiasts and tourists. The business is relatively new, founded in 2022, and leverages modern web technologies including WordPress with the Divi theme and Yoast SEO for content management and search optimization. The site integrates Google Tag Manager and Analytics for visitor tracking but lacks visible privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but could be improved with enhanced security headers and incident response information. Overall, the website is professionally designed with good content relevance and navigation, though privacy compliance and explicit contact details could be enhanced to improve trust and regulatory adherence.

W

Discover the beauty of vineyards and indulge in exquisite wine experiences with WineTourism.com. Plan your perfect winery adventure today! | Winetourism.com

winetourism.com

71

WineTourism.com is an online platform dedicated to providing information and planning tools for wine tourism enthusiasts. The website offers resources to discover local wineries, learn about wine regions, and plan winery adventures. It targets wine lovers and travelers interested in wine experiences, positioning itself as a niche hospitality service provider. The platform uses modern web technologies including Google Tag Manager, Google Analytics, and Font Awesome, ensuring a visually appealing and moderately optimized user experience. Mobile responsiveness and SEO practices are adequately implemented, contributing to good content accessibility and navigation. Security posture is moderate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy and business credibility, which impacts overall trust. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact and incident response information to improve compliance and user trust.

S

Streamify AB

streamify.io

70

Streamify AB operates a specialized live shopping platform designed to enhance e-commerce customer engagement and conversion rates through live video streaming technology. The company targets online retailers and brands seeking to leverage interactive live shopping experiences. Founded in 2017 and based in Sweden, Streamify has established a solid market presence with notable clients and a comprehensive SaaS offering that includes mobile recording apps, product synchronization, replay capabilities, and integrated analytics. Technically, the website employs modern web technologies including Google Tag Manager, HubSpot, and LinkedIn Insight tags, with a focus on performance and mobile optimization. The platform uses HTTPS and implements cookie consent mechanisms, reflecting a good level of privacy compliance. However, explicit security headers and published security policies are absent, indicating room for improvement in security transparency. From a security perspective, the site demonstrates a mature posture with secure forms and encrypted connections but lacks published incident response or vulnerability disclosure information. The absence of public WHOIS data due to privacy protection is common for commercial SaaS businesses and does not detract from the site's legitimacy. Overall, Streamify presents a professional, trustworthy digital presence with moderate technical sophistication and good privacy practices. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and expanding direct contact information to improve trust and compliance. These steps will strengthen the company's security posture and customer confidence while supporting continued growth in the competitive live shopping market.

C

Cleverec AB

cleverec.se

42

Cleverec AB operates a specialized SaaS platform called Cleverservice, designed to streamline referee assignments, digital receipts, payments, and tax reporting for sports associations primarily in Sweden. The company has an established market presence since 2014, focusing on a niche segment with tailored services for associations and referees. The website is built on WordPress with the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with a dedicated GDPR page and cookie policy. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business objectives.

V

Varsego Sverige AB

varsego.se

68

Varsego Sverige AB is a well-established Swedish wholesale distributor specializing in ice cream, beverages, confectionery, protein products, fast food, and bakery items. Operating since 2009, the company serves wholesale customers across 22 localities in Sweden, offering a broad portfolio of market-leading brands such as GB Glace. Their business model focuses on providing local service and delivery with an online ordering platform that supports customer convenience and operational efficiency. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, the website is built on modern frameworks including ASP.NET Core and Litium CMS, leveraging Cloudflare for DNS and security services. The site integrates Google Tag Manager and CookieTractor for analytics and cookie consent management, respectively. Performance is moderate with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced, security headers present, and anti-forgery protections in place, although DNSSEC is not enabled. Privacy compliance is well addressed with visible privacy and cookie policies, GDPR compliance indicators, and consent mechanisms. Contact information is clearly presented, enhancing business credibility. However, the site lacks explicit security or incident response policies and does not publish a vulnerability disclosure or security.txt file, which could improve transparency and trust. Overall, Varsego.se demonstrates a professional, secure, and compliant online presence suitable for its wholesale business. Strategic improvements in DNS security and explicit security policy publication are recommended to further enhance trust and resilience.

Y

Young Reporters for the Environment

yre.global

54

Young Reporters for the Environment (YRE) is a well-established international non-profit program operated by the Foundation for Environmental Education, focused on empowering youth aged 11-25 to investigate and report on environmental issues globally. The website serves as a platform for education, competitions, and community engagement, leveraging multimedia content and social media channels to reach its audience. Technically, the site is built on Squarespace with integrations such as Google Analytics and YouTube embeds, providing a modern and responsive user experience. Security posture is strong with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is evident with clear GDPR and cookie policies including consent mechanisms. Overall, the site demonstrates a professional and trustworthy presence consistent with its non-profit mission.

F

Foundation for Environmental Education

leaf.global

52

The website www.leaf.global represents the Learning about Ecosystems and Forests (LEAF) programme, operated by the Foundation for Environmental Education, a registered non-profit organization focused on environmental education. LEAF promotes outdoor learning and ecosystem restoration education globally, with implementation in 28 countries and recognition by HundrED’s Global Collection 2024. The site provides educational resources, campaigns, and online courses via the FEE Academy platform. Technically, the site is built on Squarespace, uses modern web technologies, and integrates Google Analytics and Stripe for analytics and payment processing. Security posture is strong with HTTPS and HSTS enabled, no exposed sensitive data, and secure forms. Privacy compliance is well addressed with GDPR-compliant cookie and privacy policies. However, WHOIS data is unavailable due to privacy protection, which is justified for this non-profit entity. Overall, the site is professional, trustworthy, and well-maintained, serving a global educational mission.

F

Foundation for Environmental Education

ecoschools.global

56

Eco-Schools is a globally recognized environmental education programme operated by the Foundation for Environmental Education, engaging millions of students across over 100 countries. The website serves as a comprehensive resource hub offering educational materials, news, events, and online courses to support sustainability education. Technically, the site is built on Squarespace, leveraging modern web technologies and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is well addressed with clear GDPR and cookie policies. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the organization's established reputation and transparent content.

F

Foundation for Environmental Education

blueflag.global

56

Blue Flag is a globally recognized eco-label program operated by the Foundation for Environmental Education, a registered non-profit organization based in Denmark and England. The website serves as an informational and educational platform promoting sustainable tourism, environmental education, and certification of beaches, marinas, and boats. The organization maintains a strong market position as a leader in voluntary environmental awards with a global network of partners and national operators. Technically, the website is built on Squarespace, leveraging modern web technologies and ensuring secure HTTPS connections with HSTS enabled. Privacy and cookie policies are comprehensive and GDPR compliant, though terms of service and incident response contacts are absent. Social media presence and sustainability policy documents enhance trust and transparency. Overall, the site demonstrates good content quality, technical implementation, and security posture, suitable for its non-profit mission and audience.

T

Tervise Paradiis

terviseparadiis.ee

54

Tervise Paradiis is a well-established 4-star spa hotel and water center located in Pärnu, Estonia, offering a comprehensive range of leisure and wellness services including accommodation, water park facilities, sports complex, bowling, and dining options. The business targets spa and wellness tourists, families, and leisure travelers, positioning itself as a leading hospitality provider in the region. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress CMS, leveraging modern SEO tools and cookie consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and published security policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in privacy compliance and security transparency would enhance trust and compliance.

Talsu Kultūras centrs is a local cultural institution based in Talsi, Latvia, focused on organizing and promoting cultural events, exhibitions, and community activities. The website serves as an information hub for upcoming events and cultural programs, targeting residents and visitors interested in local culture and amateur arts. The business model is that of a public cultural center, supporting cultural policy implementation and community engagement. Technically, the website is built on WordPress 6.8.1 with common plugins and uses Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and no visible privacy or cookie policies, which impacts compliance and user trust. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the site is functional and informative but would benefit from enhanced security and privacy compliance measures.

C

Conviva

conviva.com

65

Conviva operates a leading real-time performance analytics platform focused on digital experience monitoring for media, streaming, and related industries. The company leverages full-census client-side telemetry to provide actionable insights that improve app performance, user engagement, and operational efficiency. Their market position is strong, supported by customer testimonials, industry awards, and extensive use of modern web technologies. The website is professionally designed, mobile optimized, and SEO friendly, reflecting a mature digital presence. However, the absence of WHOIS registration data raises questions about domain registration status, though the active and rich website content suggests legitimate business operations. Security posture is good with HTTPS and no exposed sensitive data, but lacks explicit security policies and vulnerability disclosures. Privacy compliance is basic with cookie consent but no visible privacy policy. Overall, Conviva presents as a credible and professional technology company with room to improve transparency in privacy and security documentation.

A

ANOC Association of National Olympic Committees

anoc.tv

55

The ANOC.tv website serves as the official digital platform for the Association of National Olympic Committees, a Swiss-based non-profit organization dedicated to supporting and promoting Olympic committees worldwide. The site offers comprehensive coverage of sporting events, news, and specialized programs such as sustainability workshops, targeting Olympic committees, sports professionals, and enthusiasts. The business model focuses on media dissemination and informational services within the Olympic sports ecosystem. Technically, the website leverages modern web technologies including React, Google Tag Manager, Stripe.js, and push notification SDKs, indicating a mature digital infrastructure. The site is mobile-optimized with good design quality and user experience, although some accessibility and SEO aspects could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security policies or incident response contacts. WHOIS data is transparent and consistent with the organization's identity, supporting domain legitimacy. Overall, the website presents a professional and trustworthy front with moderate privacy compliance and security posture. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and user trust.

C

Coopalsa + Nadal

bus.ad

55

Coopalsa + Nadal operates as a primary public transportation service provider in Andorra, offering regular bus lines and related services. The website serves residents and visitors by providing schedules, ticket sales information, and route details. The company maintains a consistent brand presence and engages users through social media platforms such as Facebook, Twitter, and Instagram. The business model focuses on essential transportation services within the country, positioning itself as a key local operator.

R

RAMIRENT BALTIC AS

ramirent.ee

62

Ramirent Baltic AS operates as the largest tool and construction equipment rental service provider in the Baltic region, offering a comprehensive range of rental products and services including 24-hour technical support and modular factory solutions. The company is part of the Loxam Group, a recognized leader in equipment rental, which enhances its market position and credibility. The website reflects a professional and user-friendly digital presence with clear navigation and localized content tailored for Estonian customers. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, leveraging popular libraries such as jQuery and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and moderate performance, with a GDPR-compliant cookie consent mechanism and structured data enhancing SEO and user experience. From a security perspective, the site enforces HTTPS and uses Cloudflare bot management cookies, indicating a proactive approach to security. However, some security headers are not explicitly detected, and there is no publicly available security policy or incident response contact, which could be improved to strengthen trust and compliance. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic improvements in security policy transparency and enhanced accessibility could further elevate the site's maturity and user trust.

C

Churnkey

churnkey.co

64

Churnkey is a technology company founded in 2020, specializing in SaaS solutions aimed at reducing customer churn and enhancing subscriber retention for subscription-based businesses. The website presents a professional and modern design, leveraging advanced frontend frameworks such as Vue.js and Nuxt.js, and is hosted with Cloudflare for performance and security benefits. The company integrates multiple marketing and analytics tools including HubSpot, Dreamdata, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing approach. However, the site lacks explicit privacy and cookie policies, as well as visible contact information, which impacts its privacy compliance and user trust. Security posture is generally good with HTTPS enabled and Cloudflare protection, but could be improved by enabling DNSSEC and publishing security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and compliance documentation.

A

AS Arstikeskus Confido

1220.ee

45

The website 1220.ee serves as the official Estonian health advice line platform, providing telephone and web chat medical consultation services. It targets Estonian residents and callers abroad, offering guidance on medical issues, prescription renewals, and emergency care decisions. The service operates under the auspices of the Estonian Health Insurance Fund (Tervisekassa) and collaborates with healthcare providers and pharmacies. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages (Estonian and Russian). Technical infrastructure includes modern JavaScript libraries, CDN-hosted resources, and integration with Facebook SDK and Google Tag Manager for analytics and marketing purposes. The site uses HTTPS and shows no signs of blocking or WAF interference, indicating good accessibility and security basics. However, it lacks visible privacy and cookie policies, which impacts GDPR compliance and privacy posture. Contact information is limited to phone numbers with no email or physical address disclosed. No forms collecting personal data are present on the main page, reducing immediate data protection concerns. Overall, the site demonstrates a solid business credibility and technical foundation but requires improvements in privacy compliance and security policy transparency.

N

NürnbergMesse GmbH

chillventa.de

70

Chillventa is a globally recognized exhibition specializing in refrigeration technology, organized by NürnbergMesse GmbH in Germany. The website serves as a comprehensive platform for industry experts, exhibitors, and visitors to connect, showcasing the latest innovations and providing detailed event information. The company holds a leading market position in the energy sector, particularly in refrigeration and related technologies. Technically, the website is built on modern frameworks such as Next.js and Sitecore CMS, hosted on Microsoft Azure infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

A

Andmik

andmik.ee

45

Andmik is a specialized platform focused on providing data visualization and budget tracking services for Estonian municipalities. The website presents detailed geographic and demographic data for various local governments, targeting municipal officials and stakeholders. The platform leverages modern web technologies including Vue.js and Leaflet for interactive maps, supported by Google Analytics and Tag Manager for user tracking. The domain is registered with a reputable Estonian registrar, Zone Media OÜ, and was created in 2021, aligning with the platform's apparent recent launch. Technically, the website employs a modern JavaScript framework and mapping libraries, ensuring a responsive and interactive user experience. However, there is room for improvement in accessibility and SEO optimization. Security-wise, the site lacks visible security headers and does not enable DNSSEC, which could be enhanced to improve overall security posture. Privacy compliance is weak, with no visible privacy or cookie policies, and no consent mechanisms, which is a significant gap given the use of tracking technologies. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact and incident response information.

M

Medicover

medicover.com

70

Medicover is a large healthcare provider specializing in diagnostic and healthcare services primarily in Central and Eastern Europe, with recent expansion into India. The company operates through two main divisions, Diagnostic Services and Healthcare Services, targeting patients and healthcare consumers in these regions. The website presents a professional and consistent brand image with comprehensive corporate governance and financial information, indicating a mature business presence. Technically, the website is built on Drupal CMS with Bootstrap framework and integrates modern analytics tools such as Google Analytics and Google Tag Manager. It is mobile optimized and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and there is no visible security policy or incident response information published. From a security perspective, the site enforces HTTPS and uses privacy-compliant analytics configurations. The absence of WHOIS data raises concerns about domain registration legitimacy, which requires further investigation. No critical vulnerabilities or exposed sensitive data were found in the content. Overall, the website demonstrates a good security posture but could improve transparency and security best practices. The overall risk is moderate due to the missing WHOIS data and lack of explicit security policies. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to strengthen trust and compliance.

O

OÜ Tervise Paradiis

veekeskus.eu

44

OÜ Tervise Paradiis operates the largest water center in Estonia, located in Pärnu, offering a wide range of recreational and sports facilities including pools, saunas, bowling, and fitness services. The website is well designed, multilingual, and provides comprehensive information and booking forms for various customer segments such as families, schools, and groups. Technically, the site is built on WordPress with modern plugins and frameworks, and it integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and secure form handling, though some security headers could be improved and no explicit security policies are published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the domain registration is consistent with the business location and sector, indicating legitimacy and trustworthiness.

T

Toyota Eesti

toyota.ee

72

Toyota Eesti operates as the official Toyota brand presence in Estonia, offering a comprehensive range of automotive products including hybrid and electric vehicles, SUVs, commercial vehicles, and special offers. The website serves as a digital storefront and information hub for Estonian consumers and businesses interested in Toyota's mobility solutions. It reflects Toyota's global brand standards and local market adaptation. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies such as Adobe Launch for tag management, Datadog for real user monitoring, and OneTrust for cookie consent management. The infrastructure is robust, with CDN usage and integration with Toyota Europe services. Security posture is strong, with HTTPS enforced, privacy-conscious tracking, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service documents are not detected in the provided content, which is a compliance gap. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

I

Invaru OÜ

invaru.ee

65

Invaru OÜ operates as a specialized provider of assistive devices and healthcare-related products in Estonia, offering a comprehensive range of mobility aids, incontinence products, rehabilitation equipment, and personal care items. The company supports its customers through both online e-commerce and multiple physical store locations, providing sales, rental, repair, and consultation services. Their market position is that of a trusted regional player catering to individuals with special needs, elderly customers, and healthcare providers. Technically, the website is built on the nopCommerce platform, integrating modern analytics and marketing tools such as Google Analytics, Facebook SDK, and Klevu Search, reflecting a mature digital infrastructure with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security policies and vulnerability disclosure reduces transparency. Overall, the site demonstrates moderate to good professionalism and trustworthiness, with room for improvement in privacy compliance and security communication.

E

ENRE OÜ

oakohv.ee

46

ENRE OÜ operates the website oakohv.ee, an Estonian e-commerce platform specializing in the retail and wholesale of coffee products including coffee beans, capsules compatible with Dolce Gusto, Nespresso, and Senseo machines, as well as coffee machines and accessories. The company targets both individual consumers and businesses within Estonia, offering a broad product range with options for bulk purchases and subscription services. The website is professionally designed with clear navigation, product categorization, and detailed product information, supporting a positive user experience.

F

Foundation for Environmental Education

greenkey.global

56

Green Key is a globally recognized environmental certification program operated by the Foundation for Environmental Education, focusing on sustainable operation within the tourism and hospitality industry. The website presents a professional and comprehensive overview of the program, its benefits, and participation process, targeting hospitality businesses and environmentally conscious travelers. The digital infrastructure is built on Squarespace, leveraging modern web technologies and analytics tools such as Google Analytics and Hotjar for user insights. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and incident response information could enhance trust. Privacy compliance is well addressed with clear GDPR and cookie policies. WHOIS data is privacy protected but consistent with the organization's profile, supporting legitimacy. Overall, the website is a credible and effective platform for promoting sustainable tourism certification.

T

Tervisekassa

haigekassa.ee

66

Tervisekassa is a government-related healthcare organization in Estonia responsible for managing national health insurance and providing various health-related benefits and services to insured individuals. The website serves a broad audience including individuals, employers, healthcare providers, and vulnerable groups such as Ukrainian refugees. It offers comprehensive information on health insurance, medical services, preventive screenings, and related administrative procedures. The site is well-structured, multilingual, and integrates modern digital tools to enhance user experience and accessibility. Technically, the website is built on the Drupal CMS platform and leverages several third-party services including Google Analytics, Google Tag Manager, Google reCAPTCHA, Siteimprove, and tawk.to for analytics, marketing, security, and user support. The site is hosted behind Cloudflare DNS, uses HTTPS, and implements a robust cookie consent mechanism compliant with GDPR. Performance and accessibility are rated good, with mobile optimization and clear navigation. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's governmental and Estonian identity, supporting legitimacy. Overall, Tervisekassa's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

E

European Olympic Committees

eoctv.org

63

EOC Channel is a specialized media platform operated by the European Olympic Committees, focusing on streaming and rewatching European Olympic sports events such as the European Games and Youth Olympic Festival. The platform targets sports fans and the Olympic community, providing live and on-demand video content. The website demonstrates a consistent brand presence aligned with the European Olympic Committees and offers a user-friendly experience with clear navigation and event-focused content. Technically, the site employs modern JavaScript libraries including jQuery, Splide.js for sliders, and Clappr for video playback, hosted likely on Aruba infrastructure. The site is mobile optimized and includes SEO best practices. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a granular cookie consent mechanism. From a security perspective, the site uses HTTPS and implements cookie consent controls but lacks DNSSEC and advanced security headers, which are recommended for enhanced protection. No WAF or blocking mechanisms are detected, indicating full accessibility. The WHOIS data shows privacy protection typical for such organizations and domain age consistent with the business timeline. Overall, the site is professionally designed, secure, and compliant with privacy regulations, though it could improve security posture by enabling DNSSEC and publishing explicit security policies.

C

CoreIT

cuponline.se

50

CupOnline is a well-established Swedish online platform specializing in the administration of sports cups, tournaments, and series, primarily focused on youth hockey. Operating since 2003 and managed by Abion AB with technology support from CoreIT, it serves a large user base with over 1.5 million participants and thousands of events annually. The platform offers comprehensive services including registration, live reporting, statistics, and integration with third-party services for referees and streaming. The website content is rich and relevant, targeting sports organizers and participants, with a business model supported by partnerships and advertising revenue. Technically, the site is built on ASP.NET WebForms with CoreCMS, featuring moderate performance and basic mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is credible and functional but would benefit from enhanced security and privacy practices.

P

PHORIA

phoria.com.au

60

PHORIA is a specialized XR studio based in Australia, focusing on emerging immersive technologies such as Augmented Reality, Virtual Reality, and Mixed Reality. The company positions itself as an award-winning provider crafting impactful stories and experiences using cutting-edge XR technologies. Their target audience includes businesses and organizations seeking innovative immersive solutions. The website reflects a professional and modern digital presence with good design quality and mobile optimization. Technically, the site employs a variety of modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, Hotjar, and Segment Analytics, indicating a mature digital marketing strategy. Security-wise, the site benefits from HTTPS and uses secure third-party scripts but lacks explicit security headers and formal security policies, which are recommended for improvement. The WHOIS data is incomplete and malformed, which raises some concerns about domain registration transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy, security disclosures, and clearer contact information to improve trust and compliance.

T

The European Organisation for Grassroots Sport (ENGSO)

engso-education.eu

60

The European Organisation for Grassroots Sport (ENGSO) operates a dedicated education portal aimed at supporting the development of grassroots sport across Europe. The website offers a comprehensive range of educational resources, research publications, seminars, and e-courses focused on equality, governance, and the societal role of sport. ENGSO positions itself as a leading voice in voluntary grassroots sport, supported by EU funding and partnerships. The target audience includes sport professionals, voluntary organizations, and stakeholders involved in grassroots sport development. Technically, the website is built on WordPress using the Enfold theme and Elementor page builder, leveraging modern web technologies such as Google Tag Manager and Cloudflare Zaraz for analytics and performance. The site is mobile-optimized with good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, indicating a solid baseline security posture. However, additional security headers and formal security policies are absent. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional front for ENGSO's educational mission. The main limitation is the absence of WHOIS data, which restricts domain trust verification. Despite this, the presence of EU funding disclosures and consistent branding supports legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and verifying domain registration details to improve trustworthiness.

T

Tartu County Tourism Foundation

visitnarva.ee

47

Visit Narva is the official tourism website for Narva city and its surrounding county in Estonia, managed by the Tartu County Tourism Foundation. The site provides comprehensive and up-to-date information on local attractions, events, conferences, and travel logistics, targeting tourists, event organizers, and local businesses. It serves as a key regional portal promoting Narva as a travel destination with multilingual support and rich multimedia content including virtual tours and social media integration. Technically, the website is built on Drupal 7 with a moderate performance profile and good mobile and accessibility features. Security posture is adequate with HTTPS and basic security headers, though there is room for improvement in advanced security practices and incident response readiness. Privacy compliance is basic with a cookie consent mechanism and privacy policy present, but lacks detailed GDPR-specific disclosures or a data protection officer contact. Overall, the website is professional, trustworthy, and well-aligned with its business purpose, with a domain registration consistent with its Estonian location and tourism focus.

T

Tartu Welcome Centre

tartuwelcomecentre.ee

40

Tartu Welcome Centre is a local newcomer information and support center based in Tartu, Estonia, founded in 2019. It provides free consultations, registry services, cultural and networking events, and useful information to international newcomers and their families in Tartu and South-Estonia. The organization positions itself as a community-oriented non-profit entity aiming to facilitate smooth integration and settlement for newcomers. The website is built on WordPress with modern SEO and analytics tools, hosted by Zone Media OÜ. The site is well designed, mobile optimized, and offers clear navigation and professional content. However, it lacks formal privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website is trustworthy and functional, serving its target audience effectively.

T

Tiigi Seltsimaja

tartukorraldab.ee

60

Tartu korraldab is a government-affiliated event coordination platform managed by Tiigi Seltsimaja, focusing on organizing and promoting cultural and city-wide events in Tartu, Estonia. The website serves as a central hub for information on major city celebrations such as Tartu linna päev, jõululinn, and other seasonal festivals. The business operates under the official city branding and targets residents and visitors interested in Tartu's cultural life. Technically, the site is built on WordPress with modern plugins like Elementor and Modern Events Calendar, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS, anti-spam measures, and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy presence.

V

V360 agency

v360.ee

43

V360 Agency OÜ is a small Estonian digital agency specializing in web development, e-commerce solutions, branding, and full digital marketing services. The company positions itself as a smart solution for digital success, targeting businesses seeking to elevate their online presence through comprehensive marketing and branding strategies. Their website showcases a professional design with clear navigation, client testimonials, and a portfolio of projects, indicating a trusted market presence. Technically, the site is built on WordPress with modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates Google Tag Manager and reCAPTCHA for tracking and security. The hosting and domain registration are managed by Zone Media OÜ, a reputable Estonian registrar and hosting provider. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and credible, though improvements in privacy and security policies are recommended.