Security Directory

P

Puratos

puratos.be

63

Puratos is a well-established supplier specializing in high-quality ingredients for bakery, patisserie, and chocolate sectors, targeting professional bakers and chocolatiers primarily in Belgium and internationally. The website demonstrates a mature digital presence with multilingual support and advanced marketing tools such as Visual Website Optimizer and Google Tag Manager, indicating a focus on user experience and conversion optimization. The technical infrastructure is based on Adobe Experience Manager CMS, with good security practices including HTTPS and security headers. However, the absence of visible privacy and cookie policies, lack of explicit contact information, and restricted WHOIS data limit the overall trust and compliance posture. Strategic improvements in transparency and compliance documentation would enhance user trust and regulatory adherence.

P

Puratos

puratos.com.au

57

Puratos is a global enterprise specializing in manufacturing and supplying bakery, patisserie, and chocolate ingredients. The website targets professional bakers, pastry chefs, and chocolatiers, offering products, recipes, consumer insights, and services. The site demonstrates a consistent brand presence with a professional design and good content quality. Technically, it uses modern marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer, hosted likely on Adobe Experience Manager CMS. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable due to privacy protection or query failure, which is common for commercial domains but limits domain trust verification. Overall, the site is functional and professional but could improve transparency and security disclosures.

P

Puratos

puratos.com.mx

58

Puratos is a large, established company specializing in supplying ingredients for bakery, patisserie, and chocolaterie sectors, targeting professional bakers, pastry chefs, and chocolatiers primarily in Mexico. The website is localized in Spanish (Mexico) and offers product catalogs, recipes, consumer insights, and an e-commerce platform via the My Puratos account system. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and integrates marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. Security posture is good with HTTPS and secure authentication via Microsoft Azure B2C, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, but could improve transparency and compliance documentation.

P

Puratos

puratos.ke

71

Puratos is a global manufacturing company specializing in bakery, patisserie, and chocolate ingredients and products. The website targets professional bakers, patissiers, and chocolatiers, offering product information, recipes, and consumer insights. The site is well-structured, localized for Kenya, and uses modern web technologies including Adobe Experience Manager CMS and Google Tag Manager for analytics. The website is secured with HTTPS and shows good technical implementation and user experience. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Additionally, the lack of visible privacy, cookie, and contact information policies indicates gaps in compliance and user trust facilitation.

P

Puratos

puratos.ng

68

Puratos is a global manufacturer and supplier specializing in bakery, patisserie, and chocolate ingredients and products, targeting professional bakers, pastry chefs, and chocolatiers. The Nigerian localized website reflects a well-structured and content-rich platform offering product discovery, recipes, and consumer insights, supporting its B2B business model. The website is built on Adobe Experience Manager CMS and integrates modern web technologies including Google Tag Manager for analytics and FontAwesome for icons. The site demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience.

P

Puratos

puratos.nl

55

Puratos is a well-established international supplier specializing in high-quality ingredients for bakery, patisserie, and chocolate sectors. The website targets professional bakers, patissiers, and chocolatiers, offering a broad product catalog, recipes, and customer success stories, positioning itself as a trusted partner in the food manufacturing industry. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, Google Tag Manager, and Visual Website Optimizer for analytics and marketing optimization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate; HTTPS is implied, but explicit security headers and policies are not visible. Privacy compliance is weak due to the absence of accessible privacy and cookie policies. WHOIS data confirms domain legitimacy and consistency with the brand's business claims. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures.

P

Puratos

puratos.dk

57

Puratos Denmark operates as a regional branch of the global Puratos group, specializing in bakery, patisserie, and chocolate ingredients and products. The website targets professional bakers, patissiers, and chocolatiers, offering product catalogs, recipes, and consumer insights. The site is built on Adobe Experience Manager CMS, leveraging modern web technologies such as Google Tag Manager and FontAwesome for analytics and UI enhancements. The content is well-structured and professionally presented in Danish, with extensive multilingual support indicated by hreflang tags. However, the absence of WHOIS data limits domain trust verification. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit privacy or cookie policies. Contact information is not directly visible, which may impact user trust and compliance. Overall, the site reflects a mature business with a strong market position but could improve transparency and security compliance.

P

Puratos

puratos.ca

55

Puratos is a large manufacturing company specializing in bakery, patisserie, and chocolate ingredients and products, targeting professional bakers, pastry chefs, and chocolatiers primarily in Canada. The website demonstrates a mature digital presence with a well-structured product catalog, recipes, and digital services such as MyLink and a webshop requiring secure login via Azure B2C. The technical infrastructure leverages modern web technologies including React, Google Tag Manager, and Adobe Experience Manager CMS, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers and explicit security policies are missing. Privacy and cookie policies are present and likely GDPR compliant, supporting privacy compliance. However, the absence of WHOIS data for the domain www.puratos.ca is a notable anomaly that slightly reduces trustworthiness. Overall, the website is professional, secure, and business credible, with room for improvement in transparency of security policies and direct contact information.

V

Virtuaal.com

virtuaal.com

54

Virtuaal.com is an Estonian-based web hosting and domain registration company operating since 2003/2004, offering a comprehensive range of services including virtual servers, VPS cloud servers, domain registration, and SSL certificates. Positioned as a reliable local provider, it emphasizes quality, speed, and security, leveraging advanced technologies and hosting in a premium Tallinn data center. The website reflects a mature digital presence with professional design, good user experience, and clear business information. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Technically, the site uses WordPress with Materialize CSS and integrates Google Analytics and Tag Manager for tracking. Security posture is generally good with HTTPS enforced and secure form handling, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection.

E

eHost OÜ

host.ee

57

eHost OÜ operates the website host.ee, providing domain registration, web hosting, and VPS cloud server services primarily targeting customers in Estonia. The company positions itself as a local technology service provider with a focus on affordable and secure hosting solutions. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages to cater to a diverse audience. Technically, the site uses Cloudflare DNS, Google Tag Manager, Google Analytics, and WHMCS for service management, indicating a moderate level of digital maturity and infrastructure quality. Security posture is solid with HTTPS enabled and some security best practices observed, though explicit security headers and incident response policies are not evident. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

The Martha Farrell Foundation is a small non-profit organization based in India, dedicated to promoting gender justice and creating safe, equitable learning and working environments. Founded in 2016, it carries forward the legacy of Dr. Martha Farrell, focusing on empowering women, adolescents, and formal and informal workers through various programs, scholarships, and awards. The foundation maintains a professional online presence with clear contact information and active social media engagement. Technically, the website employs a moderate technology stack including jQuery, Owl Carousel, and Google Analytics, with good mobile optimization and a valid SSL certificate ensuring secure communications. However, there is room for improvement in accessibility and SEO optimization. The site lacks advanced security headers and a cookie consent mechanism, which are important for compliance and security hardening. From a security perspective, the site benefits from HTTPS and secure form handling but does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration insights, but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and professional image with moderate technical maturity. Strategically, the foundation should enhance privacy compliance by implementing cookie consent and publishing security policies. Strengthening security headers and regularly auditing third-party scripts will improve security posture. These steps will bolster trust and compliance, supporting the foundation's mission and stakeholder confidence.

E

Elisa Eesti AS

elisa.ee

60

Elisa Eesti AS is a leading telecommunications provider in Estonia, offering a comprehensive range of services including mobile and fixed internet, telephony, TV packages, and digital applications. The company targets private consumers with a strong e-commerce platform for devices and accessories. The website reflects a mature digital presence with modern technologies such as Drupal CMS and Angular framework, ensuring fast performance, mobile optimization, and good accessibility. Security posture is robust with HTTPS enforcement, security headers, and secure login mechanisms, although no public vulnerability disclosure or incident response contacts were found. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies aligned with GDPR. Overall, the website demonstrates high professionalism, trustworthiness, and market leadership.

W

WebLock

weblockonline.com

51

WebLock is a technology company specializing in cloud-based access control solutions that enable remote management and contactless entry for doors and facilities. Their product suite includes wireless electronic locks, mobile app access, RFID keypads, and integration capabilities with business software, targeting sectors such as rental buildings, hotels, sport facilities, and offices across 11 countries. The company positions itself as a modern, automated access control provider with a strong emphasis on user convenience and business automation. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery, and various JavaScript libraries, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS enforced and transfer protection on the domain, though improvements are recommended in DNSSEC and advanced security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a medium-sized, professional business with good market presence and trust indicators.

S

Superhands OÜ

superhands.ee

41

Superhands OÜ is a small Estonian technology company specializing in smart industrial and city solutions using Internet of Things (IoT) technology. Their offerings include IoT devices, product and software development, system integration, analytics, and consulting services. The company has a niche market position supported by partnerships and client testimonials, including a notable collaboration with Elisa. The website is built on WordPress with a modern tech stack and includes multilingual support and SEO optimization. Security posture is adequate with HTTPS and secure form handling, but lacks explicit security headers and privacy compliance documentation. Overall, the website is professional and trustworthy, though improvements in privacy and security transparency are recommended.

N

NEVERHACK

cybers.eu

68

NEVERHACK Estonia is a leading cybersecurity company providing comprehensive cyber defense services to both private and public sector clients in Estonia and the surrounding region. The company offers a broad range of services including cyber operations centers (SOC), offensive security testing such as penetration testing and red team exercises, advisory services including virtual CISO and risk assessments, as well as cybersecurity solutions like managed security infrastructure and cyber insurance. The website reflects a professional and modern digital presence with clear branding, good content quality, and strong trust signals including ISO certifications and media coverage. Technically, the site is built on WordPress with Bootstrap and integrates multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response contacts could improve the posture further. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, NEVERHACK Estonia presents a credible and trustworthy cybersecurity service provider with a solid market position and growing digital maturity.

N

Nordic Aviation Group

xfly.ee

44

Nordic Aviation Group is a medium-sized airline organization based in Estonia, operating multiple airline brands including Nordica and Xfly. The company provides aviation services primarily in the transportation sector, targeting airline passengers and industry stakeholders. The website content focuses on a recent bankruptcy filing, indicating significant financial distress. The company maintains a professional online presence with consistent branding and structured data, but lacks some privacy and security policy disclosures. Technically, the website is built on WordPress with modern technologies such as Bootstrap and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but could be improved with additional security headers and incident response information. Overall, the website is trustworthy and professionally maintained, but the lack of cookie consent and explicit privacy compliance mechanisms represents a compliance gap. The absence of contact emails and phone numbers on the analyzed page limits direct communication channels. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

N

Nordic Aviation Group

nagroup.ee

44

Nordic Aviation Group is a regional airline group based in Estonia, operating under brands such as Nordica and Xfly. The company provides passenger air transport services primarily in the Nordic and Baltic regions. The website presents official press releases and corporate information targeting passengers, industry stakeholders, and potential employees. The business is positioned as an important regional player with a medium-sized operational scale. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Rank Math and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and follows some best practices but lacks explicit security headers and a published security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

Clinical Research News Online is a specialized digital publication focused on delivering news, analysis, and insights related to clinical trials, patient recruitment, and clinical research technologies. It operates under the umbrella of Cambridge Innovation Institute, a reputable organization in the healthcare and life sciences sector. The website targets professionals in clinical research, pharmaceutical companies, and healthcare providers, offering a range of services including news articles, press releases, advertising, webinars, and podcasts. The business model is primarily advertising and lead generation driven, supported by event promotion and content marketing. Technically, the website is built on the Sitefinity CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, Google Tag Manager for analytics, and integration with social media platforms. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks several recommended security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or a WHOIS query limitation, which slightly impacts the trustworthiness assessment. Overall, Clinical Research News Online presents as a professional and credible source within its niche, with a solid technical foundation and privacy compliance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and resolving WHOIS data inconsistencies to improve domain legitimacy and trust.

C

Contract Pharma

contractpharma.com

61

Contract Pharma operates as a specialized media outlet focused on connecting contract service providers with pharmaceutical and biopharmaceutical sponsors. The website offers a comprehensive range of services including industry news, digital and print magazine editions, directories, event information, and sponsored content. It targets professionals and companies within the pharma and biopharma sectors, positioning itself as a premier information and networking platform in this niche. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools such as Google Analytics, HubSpot, and AdRoll. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with responsive design elements. Performance is moderate, with standard ad integrations and tracking scripts. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA for form protection. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, explicit security policies and incident response information are not publicly available. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the site presents a professional and trustworthy front for its business model, but the lack of WHOIS transparency and absence of direct contact information on the homepage slightly reduce its trustworthiness. Strategic improvements in security transparency and contact availability would enhance credibility and compliance.

Seileri Kvartal is a residential real estate development project by Nordecon, focused on building a modern riverside living environment in Pärnu city center, Estonia. The website presents detailed information about the project, including location, history, apartment plans, and amenities, targeting homebuyers and investors in the region. The site uses modern web technologies including Google Analytics, Facebook Pixel, and Google Maps API to enhance user experience and marketing efforts. The cookie consent mechanism is implemented with clear categories and user control, supporting GDPR compliance. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers and policies are missing. The domain registration is consistent and appropriate for the business, registered with a reputable Estonian registrar. Overall, the website is professional, informative, and trustworthy, though it lacks explicit contact details and some legal pages like terms of service.

S

SmartBear Software

stoplight.io

63

Stoplight, a product under SmartBear Software, offers a comprehensive API design and documentation platform aimed at accelerating API development workflows. The company targets developers, program leaders, and tech executives seeking to improve API quality and governance at scale. The website reflects a mature enterprise-grade SaaS business with a strong market position supported by a rich feature set and open source tools. Technically, the site is built on Webflow with integrations for analytics, marketing, and consent management, hosted securely behind Cloudflare. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy compliance is robust with clear cookie consent and GDPR-aligned policies. Business credibility is high, supported by consistent branding, social proof, and detailed content. Overall, the site demonstrates a professional, secure, and user-friendly digital presence.

Meriton Energy Services operates as an Australian energy retailer focused on providing fairer energy costs and simplified contracts primarily targeting residential customers, including Meriton apartment residents. The company emphasizes transparent pricing, no lock-in contracts, and Australian-based customer support, positioning itself as a customer-friendly alternative in the Australian energy market. The website is professionally designed with clear calls to action and multiple contact forms to facilitate customer engagement. Technically, the site uses a mix of legacy and modern web technologies, including Google Analytics and reCAPTCHA for security and tracking. However, the use of an outdated jQuery version presents a potential security risk. Security posture is generally good with HTTPS enforced and spam protection on forms, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration and DNS setup are consistent with a legitimate Australian business, enhancing trustworthiness.

M

Meriton Property Services Pty Ltd

meritonsuites.com.au

53

Meriton Suites is a leading Australian hospitality company specializing in serviced apartment-style hotel accommodation. Founded in 2003 and owned by Meriton Property Services Pty Ltd, it operates over 6,200 suites across 23 prime locations in Australia, positioning itself as the largest operator in this niche. The company targets business travelers, families, and extended stay guests, offering spacious suites with home-like amenities and a loyalty program called Eminence. The website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design that supports direct bookings and customer engagement. Technically, the website is built on WordPress and leverages modern JavaScript libraries and frameworks such as UIkit, Owl Carousel, and Slick Carousel. It integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, Hotjar, Klaviyo, and Campaign Monitor, indicating a sophisticated approach to user tracking and marketing automation. Hosting and DNS are managed through Cloudflare, ensuring robust performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with strong SSL configuration and employs Cloudflare DNS, but lacks explicit security headers and visible incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial; while a comprehensive privacy policy and terms of service are present, there is no cookie consent mechanism, which may affect GDPR compliance. Contact information is available, but no dedicated security or incident response contacts were found. Overall, Meriton Suites' website demonstrates a high level of professionalism and business credibility with a strong market position in the Australian hospitality sector. Security posture is good but could be improved with enhanced privacy compliance and security policies. Strategic recommendations include implementing cookie consent, adding security headers, and publishing incident response information to strengthen trust and compliance.

C

Chronogolf by Lightspeed

chronogolf.com

73

Chronogolf by Lightspeed operates a leading online platform for booking golf tee times and managing golf course operations. The company targets golfers seeking convenient tee time reservations and golf course operators needing management software. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated Google Maps API, and comprehensive privacy and cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain www.chronogolf.com suggests privacy protection or alternative registration, but the website's professional quality and association with Lightspeed support its legitimacy. Overall, the site is well-optimized for performance, mobile use, and SEO, providing a trustworthy user experience.

S

Spend Matters

spendmatters.com

71

Spend Matters is a well-established procurement solutions intelligence platform founded in 2004, providing market insights, analysis, and news targeted at procurement professionals and business decision makers. The website demonstrates a professional design and consistent branding, leveraging modern web technologies and marketing tools such as HubSpot, Facebook Pixel, and LinkedIn Insight for analytics and advertising. The technical infrastructure is based on WordPress, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit privacy policies, terms of service, and security headers indicates room for improvement in compliance and security best practices. Overall, the domain registration data supports the legitimacy and stability of the business, with no suspicious patterns detected.

Grupa ZPR Media is a prominent multimedia group in Poland, delivering a wide range of entertainment, information, and advisory content across multiple media channels including press, radio, internet, and television. The company operates numerous well-known brands and offers comprehensive advertising and business services, positioning itself as a leader in the Polish media market. Their digital infrastructure incorporates modern web technologies and analytics tools, supporting a responsive and content-rich website experience. Security practices include HTTPS enforcement and cookie consent mechanisms, though some improvements in security headers and library updates are recommended. Overall, the website reflects a mature digital presence with strong business credibility and compliance with privacy regulations.

B

BOSS CREATOR

pestapora.com

60

Pestapora 2025 is a major Indonesian music festival organized by BOSS CREATOR, targeting music fans and festival attendees primarily in Indonesia. The website promotes the 3-day event scheduled for September 2025, offering ticket sales, event information, and multimedia content. The business operates in the media and event management sector with a medium-sized organizational footprint and a history dating back to 2016. Technically, the website is built on a modern Nuxt.js framework with Tailwind CSS, optimized for mobile devices and featuring good SEO practices. Security posture is adequate with HTTPS and domain protection but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

I

Iklandisini.com

iklandisini.com

52

Iklandisini.com is a self-service advertising platform targeting Indonesian businesses seeking affordable and flexible advertising solutions across digital, social media, video, and TV media. The platform is positioned as an accessible and easy-to-use service for small business owners to manage their own ad campaigns. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Splide.js, and Owl Carousel, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS with good SSL configuration but lacks security headers and cookie consent mechanisms, which are important for compliance and protection. The absence of WHOIS data for the domain is a significant concern, impacting trust and legitimacy. Overall, the site is functional and professional but requires improvements in privacy compliance and domain registration transparency.

R

Realprojektas UAB

realprojektas.lt

44

Realprojektas UAB is a well-established engineering and infrastructure design company operating primarily in Lithuania with regional presence in Estonia, Latvia, and Sweden. The company offers a broad range of services including engineering design, geodetic surveys, and project management, serving over 1000 clients with more than 20 years of experience. Their business model focuses on delivering sustainable infrastructure solutions, supported by ISO certification and memberships in relevant industry organizations. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the website runs on WordPress 6.4.5 with common plugins such as WPML for multilingual support and Cookie Notice for GDPR compliance. Google Tag Manager is used for analytics and tracking. The site is served over HTTPS with good SSL configuration, though it lacks some recommended security headers. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. However, the absence of a published security policy, incident response contacts, and security.txt file indicates room for improvement in security transparency and readiness. The lack of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional website content. Overall, Realprojektas presents a credible and professional business front with solid technical implementation and privacy compliance. The main risk lies in the missing WHOIS data which should be investigated further. Strategic recommendations include enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and compliance.

A

AS TREV-2 Grupp

trev2.ee

52

AS TREV-2 Grupp is a well-established Estonian company specializing in infrastructure construction and maintenance, including road building, traffic management, and natural resource mining. The company positions itself as a market leader in Estonia with a focus on sustainable and smart solutions to improve quality of life and safety. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO and cookie compliance plugins, and integrates Google Analytics for performance tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature business with good technical infrastructure and compliance awareness.

Z

Zone Media OÜ

tarktee.ee

51

Tark Tee is an Estonian traffic and road condition information platform operated by Zone Media OÜ, providing real-time updates on traffic restrictions, roadworks, detours, and operational traffic information. The website leverages modern web technologies including Angular and Esri ArcGIS API to deliver interactive maps and data to Estonian road users. The platform targets both private drivers and commercial transport operators, serving as a key public service in Estonia's transportation sector. Technically, the site is well-structured with good mobile optimization and integration of analytics tools such as Google Analytics and Tag Manager. However, it lacks visible security headers and explicit privacy or security policies, which are areas for improvement. Overall, the site is accessible without WAF or blocking mechanisms, indicating stable hosting and domain legitimacy.

H

Hendrikson & Ko OÜ

hendrikson.ee

33

Hendrikson & Ko OÜ operates the Hendrikson DGE website, a professional environmental consulting firm based in Estonia and part of the larger DGE Group. The company offers a broad range of services including planning, environmental management, impact assessments, industrial risk analysis, infrastructure, biodiversity, sustainability, GIS, and spatial solutions. The website reflects a medium-sized enterprise with a clear market position as a leader in environmental consulting within the Nordic and Baltic regions. The company targets both private and public sector clients seeking sustainable and innovative environmental solutions. Technically, the website is built on WordPress using the Avada theme and employs modern SEO and performance optimization tools such as Yoast SEO and WP Rocket. Analytics are implemented via Google Tag Manager and Analytify, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. Overall, the website is professional, trustworthy, and well-structured, but could enhance compliance and security transparency.

S

Sadamaregister

sadamaregister.ee

60

Sadamaregister.ee is an Estonian website dedicated to providing a comprehensive register of ports and harbors within Estonia. The platform offers a searchable database of port names and locations, targeting maritime professionals, boat owners, and the general public interested in port information. The website integrates with the Estonian state authentication service for user login, indicating an official or government-related service. The site uses modern web technologies including Vue.js and Font Awesome, and employs Google Tag Manager for analytics. While the site is mobile optimized and offers a good user experience, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security-wise, the site uses HTTPS and integrates secure login mechanisms but lacks security headers and DNSSEC, which are recommended for enhanced security. Overall, the domain registration is consistent and legitimate, supporting the website's credibility as an official maritime information resource.

E

Eesti Maanteemuuseum

maanteemuuseum.ee

53

Eesti Maanteemuuseum is a specialized museum dedicated to the history and culture of roads and transportation in Estonia. It operates as a cultural and educational institution affiliated with the Estonian Transport Administration, offering exhibitions, educational programs, and events targeted at the general public, families, and students. The website is built on Drupal 9 and incorporates modern web technologies, providing a good user experience with accessibility features and multilingual support. Social media integration and active content updates enhance engagement. Security posture is solid with HTTPS and privacy-conscious analytics, though the site lacks explicit privacy and security policies. Overall, the site is professional and trustworthy, reflecting the museum's established presence and public service role.

D

Deere & Company

machinefinder.com

52

MachineFinder is an online platform dedicated to listing used John Deere equipment, serving agriculture, construction, forestry, and grounds care markets. It operates as a trusted marketplace affiliated with Deere & Company, providing users access to certified used equipment, dealer locators, auctions, and financing options. The website demonstrates a high level of professionalism, consistent branding, and comprehensive content tailored to its target audience of equipment buyers and industry professionals. Technically, the site employs a modern technology stack including AngularJS, jQuery, Adobe DTM, and Google Tag Manager, with embedded multimedia content and a cookie consent mechanism powered by OneTrust. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or querying issues, which slightly impacts trustworthiness. Overall, MachineFinder presents a secure, compliant, and user-friendly platform with strong business credibility linked to Deere & Company. Strategic improvements in security headers, accessibility, and transparency of contact and security policies would further enhance its posture.

S

Scandium Kinnisvara AS

scandium.ee

43

Scandium Kinnisvara AS is a medium-sized Estonian real estate developer specializing in residential, rental, and commercial property development with a focus on quality and sustainability. The company operates notable projects such as the Marienholm peninsula development in Haapsalu and also engages in energy projects under Scandium Energia. The website is professionally designed, multilingual, and provides clear contact information and active content updates, positioning the company as a credible player in the Estonian real estate market. Technically, the site is built on WordPress with WooCommerce and uses modern libraries and analytics tools, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA protection on forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with cookie consent implemented but no visible privacy or security policies. Overall, the site reflects a trustworthy and professional business with room for enhanced security and compliance documentation.

E

e-Commerce awards

ecpawards.pl

44

e-Commerce awards is a Polish event organizer focused on recognizing excellence in the digital economy and e-commerce sector. The website serves as a platform for promoting the awards competition, providing information about registration deadlines and the gala event. The site is built on WordPress using the Kadence theme and blocks, with modern plugins for forms and cookie consent. The technical infrastructure is solid with HTTPS enabled and hosted by a reputable Polish hosting provider. However, the site lacks explicit privacy and terms of service pages, and no direct contact information or security policies are published, which could impact user trust and compliance. Cookie consent is implemented, and Google Tag Manager is used for analytics and tracking. Overall, the site is professional and functional but could improve in privacy compliance and security transparency.

T

Thron

thron.com

52

Thron is an Italian technology company specializing in an integrated platform that combines Digital Asset Management (DAM) and Product Information Management (PIM). Their platform enables businesses to centralize, govern, and distribute digital assets and product data efficiently across multiple communication channels. The company targets medium to large enterprises seeking to optimize digital content workflows and product data management. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern tools such as Google Tag Manager, reCAPTCHA, and Iubenda for privacy compliance, indicating a robust and well-maintained infrastructure. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data suggests privacy protection, which is common for technology companies. Overall, the site demonstrates high professionalism and trustworthiness with moderate user tracking balanced by GDPR-compliant consent mechanisms.

Cinderella Wine operates as a specialized e-commerce retailer focusing on limited-time wine deals, typically offering deeply discounted wines for 24 hours only. It is part of the Wine Library network, a recognized wine retail brand in the United States. The website targets wine consumers seeking value deals and uses a flash sale business model to create urgency and exclusivity. The company leverages social media and email subscriptions to engage customers and alert them to new offers. Technically, the site is built on WordPress with common web technologies such as jQuery and integrates Google Analytics and Google reCAPTCHA for tracking and spam prevention. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. Security posture is moderate, with HTTPS enforced and domain registrar locks enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site presents a professional and trustworthy retail experience but could improve in security and privacy transparency.

W

Wine Library

winetext.com

57

WineText is a niche retail service specializing in delivering highly allocated and rare wine offers to consumers via daily SMS subscriptions. The business model focuses on convenience and exclusivity, targeting wine enthusiasts aged 21 and over who seek quality wines at discounted prices. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized business founded in 2012 and affiliated with Wine Library. The technical infrastructure leverages a Ruby on Rails backend with extensive use of third-party marketing and analytics tools, hosted behind Cloudflare for performance and security. While the site is mobile optimized and SEO friendly, it lacks some advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite extensive user tracking. Contact information and trust seals are clearly presented, supporting business credibility. Overall, the site demonstrates a mature digital presence with room for security and privacy improvements.

F

Formaloo

formaloo.com

67

Formaloo is a technology company offering an all-in-one SaaS platform for creating online forms, custom CRMs, dashboards, e-signatures, and workflow automation. The platform targets businesses and teams seeking to streamline data collection and process automation with AI-powered enhancements. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager, Amplitude Analytics, and Intercom for customer engagement and analytics. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, but the overall website professionalism and trust signals suggest a legitimate business. Strategic recommendations include publishing detailed security and incident response policies, enhancing transparency on data protection officers, and monitoring domain registration details for consistency.

F

Firmstudio Limited

firmstudio.com

64

FirmStudio Limited is a well-established creative digital agency based in Hong Kong, specializing in web design, UX/UI, branding, and digital marketing services. With over 18 years of experience and a portfolio of 250+ projects and 130+ awards, the company holds a strong market position as a leading agency in its region. The website reflects a professional and polished digital presence, showcasing their expertise and client work effectively. Technically, the site employs modern JavaScript libraries such as jQuery and integrates multiple analytics and advertising tools including Google Analytics, Google Tag Manager, and Baidu Analytics, indicating a mature digital marketing infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured navigation. Security-wise, the site uses HTTPS and secure form handling but lacks visible security headers and a formal security policy or incident response contact, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and contact details appear legitimate. Overall, the site scores well in content quality, technical implementation, and business credibility but could enhance privacy compliance and security posture.

U

UPRENT OÜ

uprent.ee

43

UPRENT OÜ is a well-established equipment rental and sales company founded in 2012, specializing in pumps, pump systems, electric generators, and trench shoring equipment. Operating primarily in Estonia with regional presence in Latvia, Lithuania, and Poland, UPRENT serves industrial and construction clients requiring efficient and reliable pumping solutions. The company is part of the Renta Group Oy, indicating a strong parent company backing and regional market integration. The website reflects a professional and consistent brand image with detailed service offerings and project portfolios, targeting B2B clients in manufacturing, energy, and construction sectors. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging modern web technologies including Google Analytics and reCAPTCHA for user tracking and security. Hosting is supported by Microsoft Online DNS infrastructure, ensuring reliable domain resolution. The site is mobile-optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers and published security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages, representing a compliance gap under GDPR. Overall, UPRENT's digital presence is solid with good business credibility and technical implementation. To enhance trust and compliance, the company should publish comprehensive privacy and security policies and implement additional security headers. The domain WHOIS data is consistent and supports legitimacy, with no suspicious patterns detected.

R

RENTA PUMPS

uprent.lt

46

RENTA PUMPS operates as a leading equipment rental and sales company specializing in pumps and pumping systems across the Baltic region. The company offers a broad range of rental equipment including pumps, electrical generators, trench shoring systems, and related accessories, targeting construction, industrial, and infrastructure sectors. Their market position is strong within Lithuania and neighboring countries, supported by localized contact points and multilingual website presence. Technically, the website is built on WordPress with WooCommerce and WPBakery, integrating modern analytics and bot protection tools such as Google Tag Manager and reCAPTCHA. Security posture is solid with HTTPS enforced and no exposed sensitive data, although improvements in security headers and incident response policies are recommended. Overall, the website is professional, content-rich, and compliant with GDPR cookie and privacy policies, reflecting a mature digital presence for a medium-sized enterprise.

D

Domain Protection Services, Inc.

videoly.co

65

Videoly is a technology company founded in 2014 that offers a SaaS platform designed to automatically connect product videos to online stores, targeting online retailers and brands. Positioned as a leading product video platform, Videoly aims to increase sales and streamline video distribution for e-commerce businesses. The website reflects a modern digital presence built on Webflow CMS, leveraging Cloudflare for hosting and DNS services, and integrates advanced marketing and analytics tools such as HubSpot, Google Analytics, and Cookiebot for privacy compliance and user tracking. From a technical perspective, the website demonstrates good implementation with responsive design, moderate performance, and adherence to SEO best practices. The use of Cookiebot ensures GDPR-compliant cookie consent management, reflecting a strong commitment to privacy. Security posture is solid with HTTPS enforced and domain transfer protections in place, although there is room for improvement in DNSSEC adoption and explicit security headers. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, the absence of a public security policy, incident response contacts, or vulnerability disclosure mechanisms suggests opportunities to enhance transparency and readiness. The domain's WHOIS data indicates privacy protection typical for SaaS businesses, with a well-aged registration supporting legitimacy. Overall, Videoly presents a professional and trustworthy online presence with good privacy and security foundations. Strategic enhancements in security policy publication, DNS security, and contact information transparency would further strengthen its risk posture and stakeholder confidence.

C

CSV Loader

csv-loader.com

60

CSV Loader is a technology-focused SaaS provider specializing in universal CSV import and export tools designed to integrate with over 100 business applications. Founded in 2022, the company targets businesses and professionals seeking efficient data management solutions. The website presents a professional and consistent brand image with clear service offerings such as CSV Import and Data Export, supported by customer testimonials and a 14-day free trial to encourage adoption. Technically, the website is built on the Tilda CMS platform, leveraging standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. There is no evidence of privacy or cookie policies, terms of service, or incident response information, which are critical for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, CSV Loader presents a moderate risk profile with strengths in business credibility and technical implementation but notable gaps in privacy compliance and security best practices. Strategic improvements in policy transparency, security headers, and contact information would enhance trust and compliance.

S

Saarehotell

saarehotell.ee

42

Saarehotell operates the Saaremaa Rannahotell, a hospitality business located in Saaremaa, Estonia, offering accommodation, sauna services, restaurant dining, event hosting, and holiday packages. The website targets families, couples, and groups seeking a peaceful seaside retreat. The business positions itself as a niche regional hospitality provider with a focus on a tranquil and cozy atmosphere. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern analytics and marketing tools such as Google Tag Manager, Hotjar, and MailerLite. The site is mobile-optimized and features a comprehensive cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is strong with HTTPS enforced, proper security headers, and use of reCAPTCHA, although explicit security policies and incident response contacts are absent. Overall, the site is professional and trustworthy, with clear contact information and social media presence. Recommendations include publishing privacy and security policies, enhancing accessibility, and maintaining regular security audits.

M

Meerbach Residents

meerbach.ee

41

Meerbach Residents is a hospitality business offering luxury apartments located in the historic center of Kuressaare, Saaremaa, Estonia. The company targets tourists and visitors seeking premium, comfortable lodging with modern amenities and a Parisian style influence. Their business model focuses on short and long-term apartment rentals as an alternative to traditional hotels, leveraging a prime location near key attractions and the sea. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website is built on WordPress with the Yoast SEO plugin and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and performs moderately well, though accessibility features are basic. The SSL configuration is excellent, ensuring secure HTTPS connections. However, the site lacks some security best practices such as security headers and visible privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of a privacy policy and cookie consent mechanism represents a compliance gap, especially under GDPR regulations applicable in Estonia. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture and transparency. Overall, the website is functional, professional, and credible but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas will reduce risk and increase user trust, supporting the business's growth and reputation in the hospitality market.

A

Anonymous Presenters

presenters.ee

49

Anonymous Presenters is a small Estonian education company specializing in public speaking training and coaching. Founded in 2018, it offers virtual and live courses designed to help individuals communicate naturally and effectively. The website is professionally designed, mobile-optimized, and uses WordPress with SEO and marketing integrations such as Google Tag Manager and Facebook Pixel. The company demonstrates good market positioning with reputable clients and positive testimonials. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is moderate with a cookie banner but no explicit privacy policy or terms of service found. Overall, the website is trustworthy and professionally maintained, supporting the company's business credibility.