Security Directory

T

TULUCOM OÜ

coziest.ee

41

Coziest is a small Estonian hospitality business operated by TULUCOM OÜ, offering comfortable and homely rental apartments and mini houses across Estonia, including Tallinn, Haapsalu, Meremõisa, and Kalaranna. The website is professionally designed using WordPress with SEO optimization and integrates Google Tag Manager for analytics. The business targets travelers and temporary residents seeking reliable accommodation solutions in Estonia. The company presents clear contact information and social media presence, enhancing trust and accessibility. Technically, the website employs modern web technologies such as WordPress CMS, Yoast SEO, Swiper.js for sliders, and Google Tag Manager. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal security policies. Privacy and cookie policies are absent, indicating gaps in compliance with GDPR and related regulations. Overall, the website is functional, professional, and credible from a business perspective but requires improvements in privacy compliance and security best practices. There are no signs of blocking or WAF interference, allowing full content access and analysis.

L

LaSpa Group OÜ

laspa.ee

42

LaSpa Group OÜ operates the LaSpa wellness and spa hotel located in Laulasmaa, Estonia, offering a comprehensive range of hospitality services including accommodation, spa treatments, dining, and event hosting. The company positions itself as a premium wellness destination with a strong emphasis on natural wellbeing and quality experiences, supported by a Michelin Guide recommended restaurant and diverse activity offerings. The website reflects a mature digital presence with well-structured content, clear navigation, and consistent branding aimed at wellness tourists, families, and business clients. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism and trustworthiness with no critical vulnerabilities detected.

K

Kastani Apartments

kastaniapartments.eu

43

Kastani Apartments is a small hospitality business offering fully furnished serviced apartments for short-term and long-term rental in the city center of Rakvere, Estonia. The website presents a professional and consistent brand image with clear information about the apartments, location, and booking options. The target audience includes tourists and visitors seeking modern accommodation in Rakvere. The business model focuses on rental services with an integrated booking system via an external provider. Technically, the website is built on WordPress with Yoast SEO and uses Google Tag Manager for analytics. The site is mobile optimized and has good SEO practices but lacks some accessibility features. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but the absence of security headers and vulnerability disclosure reduces the security maturity. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but could improve in privacy and security transparency.

T

Tiny Marienholm OÜ

tinymarienholm.ee

45

Tiny Marienholm OÜ operates a hospitality business offering unique seaside accommodation in Haapsalu, Estonia, specializing in luxury minivillas and peegelmaja houses with scenic lagoon views. The company targets tourists seeking stylish and nature-integrated lodging experiences, positioning itself as a niche provider with additional services such as spa packages and private sailing. The website is professionally designed with clear navigation, booking integration, and active social media presence, reflecting a modern digital maturity level. Technically, the site runs on WordPress with common plugins for SEO, analytics, and social media feeds, hosted under an Estonian registrar. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the domain registration is consistent and trustworthy, supporting the business credibility. Strategic improvements in privacy transparency and security hardening are recommended.

S

SÖRWESPA

sorwespa.com

52

SÖRWESPA is a small hospitality business located in Saaremaa, Estonia, offering accommodation, spa services, authentic local cuisine, and event spaces. The website reflects a well-structured and professionally designed platform built on WordPress, with multilingual support and integrated booking links to a third-party service. The technical infrastructure includes modern web technologies and analytics tools such as Google Tag Manager and CookieYes for cookie consent management. Security posture is adequate with HTTPS enabled and domain transfer protection, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partially addressed through cookie consent but lacks a dedicated privacy policy page. Overall, the website presents a trustworthy and professional image suitable for its target audience of tourists seeking wellness and relaxation in Saaremaa.

F

FinEst-Hall Factory OÜ

pvc-hall.fr

44

FinEst-Hall Factory OÜ is a specialized manufacturer and installer of PVC halls and awnings, offering turnkey solutions including design, production, installation, maintenance, and metalworking services such as plasma and laser cutting. The company targets businesses requiring flexible, mobile, and certified storage solutions primarily in European markets, with a strong presence in France and Finland. The website reflects a professional and consistent brand image supported by ISO certifications and positive customer testimonials. Technically, the site is built on WordPress with WooCommerce, leveraging modern analytics and marketing tools while maintaining good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration is consistent with the business's multilingual expansion strategy, and no suspicious patterns were detected.

F

FinEst-Hall Factory OÜ

pvc-hall.se

42

FinEst-Hall Factory OÜ is a manufacturing company specializing in the design, production, and installation of PVC halls and awnings tailored to customer needs. Established in 2021 and based in Estonia, the company serves primarily B2B clients in the Nordic and Baltic regions, offering modular, mobile, and expandable storage solutions. Their market position is supported by multiple ISO certifications and a portfolio of over 250 installed halls, demonstrating reliability and quality. The website reflects a professional and comprehensive digital presence with multilingual support and detailed service descriptions. Technically, the site is built on WordPress with WooCommerce, leveraging modern analytics and marketing tools while maintaining good performance and accessibility standards. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

FinEst-Hall Factory OÜ

pvc-hall.dk

42

FinEst-Hall Factory OÜ is a specialized manufacturer and service provider of PVC halls and awnings, offering tailored, modular, and mobile storage and workspace solutions primarily targeting businesses in Northern Europe. The company emphasizes quality, speed, and flexibility, supported by multiple ISO certifications and a portfolio of over 250 installed halls. Their business model includes turnkey services from design and manufacturing to installation and maintenance, with additional metalworking capabilities such as plasma cutting and tube laser processing. The website is professionally designed, multilingual, and optimized for SEO and mobile use, reflecting a mature digital presence for a small-sized enterprise founded in 2021. Technically, the website is built on WordPress with WooCommerce and enhanced by modern libraries and tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good performance, accessibility, and security practices, including HTTPS enforcement and consent-based script loading. However, it lacks some advanced security headers and explicit security or incident response policies. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the website content and business claims, indicating legitimacy and trustworthiness. The absence of a security.txt file or vulnerability disclosure policy is noted as an area for improvement. Overall, the website and business present a trustworthy, professional, and compliant profile with strong branding and customer trust signals. Strategic enhancements in security policies and DNS security could further strengthen their posture.

F

FinEst-Hall Factory OÜ

pvc-halli.fi

43

FinEst-Hall Factory OÜ is a medium-sized manufacturing company specializing in the production and installation of PVC halls and awnings tailored to customer needs. Established in 2014, the company holds multiple ISO certifications, underscoring its commitment to quality and compliance. Its market position is solid within the regional manufacturing sector, serving businesses requiring durable and mobile storage solutions in Finland and neighboring countries. The company offers a comprehensive service model including manufacturing, installation, maintenance, and metal processing services such as plasma cutting and tube laser work. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, leveraging popular libraries and tools such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a good performance profile. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs consent blocking for tracking scripts, though it could improve by implementing additional security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the website reflects a professional and credible business presence with a strong focus on quality and customer service.

F

FinEst-Hall Factory OÜ

pvc-hall.ee

40

FinEst-Hall Factory OÜ is a medium-sized Estonian manufacturing company specializing in the design, production, installation, and maintenance of PVC halls and awnings, as well as metalworking services such as plasma cutting and tube laser processing. The company holds multiple ISO certifications, indicating a strong commitment to quality and industry standards. Their website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern analytics and marketing tools integrated with user consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published security policies. Overall, the company presents a trustworthy and credible business front with clear contact information and customer testimonials.

D

DFDS A/S

dfds.com

77

DFDS A/S operates a comprehensive European ferry travel service, offering passenger and freight ferry crossings, mini cruises, and package holidays. The company holds a strong market position as the World’s Leading Ferry Operator with multiple routes across Europe, the UK, Scandinavia, and the Baltics. Their website provides rich content, clear navigation, and a professional user experience targeting travelers and logistics customers. Technically, the site is built on modern frameworks such as React and Gatsby, with optimized performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data reduces domain registration trustworthiness, though the website content and branding strongly support legitimacy.

H

HiMedik

himedik.com

56

HiMedik.com is an Indonesian online media portal specializing in health news and lifestyle content. It operates under the umbrella of Arkadia Digital Media, a known media group with multiple sister sites. The website targets Indonesian readers interested in health-related information, offering articles on traditional and modern medicine, healthy living, and related topics. The site is professionally designed with consistent branding and good content quality, positioning it as a reputable health news source within its market segment. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Facebook SDK, and AMP for mobile optimization. It uses HTTPS with a valid SSL certificate, ensuring secure communications. The site integrates multiple advertising networks and tracking services, indicating a monetization model based on advertising revenue. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS but lacks visible security headers and explicit vulnerability disclosure mechanisms. No security.txt or incident response contacts are provided, and cookie consent mechanisms are absent despite privacy policy presence. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy, although the active and professional website presence mitigates some risk. Overall, HiMedik.com presents a solid online media presence with good content and technical implementation but would benefit from enhanced security practices, improved privacy compliance, and resolution of WHOIS data inconsistencies to strengthen trust and compliance posture.

G

GuideKu

guideku.com

56

GuideKu.com is an Indonesian online media portal specializing in travel, food, events, and lifestyle news. It operates under the Arkadia Group umbrella, which manages multiple related media portals. The website offers a rich content experience with articles, photos, and videos targeting Indonesian audiences interested in tourism and lifestyle. The business model is primarily advertising-driven, leveraging multiple ad networks and tracking technologies. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics, and Facebook SDK, with good SEO and mobile optimization. Security posture is solid with HTTPS enforced, but lacks some security headers and a vulnerability disclosure mechanism. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, raising questions about domain registration legitimacy, though the site branding and content suggest a legitimate media entity. Overall, the site is functional, content-rich, and moderately secure but could improve privacy and security practices.

M

MobiMoto

mobimoto.com

54

MobiMoto.com is an Indonesian automotive news portal providing up-to-date information, articles, tips, and event coverage related to cars and motorcycles. It operates under the Arkadia Digital Media group, which manages several sister media sites. The website targets Indonesian automotive enthusiasts and general readers interested in automotive news. The business model is primarily online media with advertising revenue streams. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook SDK, and AMP for mobile optimization. The site is served over HTTPS with good SSL configuration and uses multiple ad networks and tracking services. Security posture is generally good with no visible vulnerabilities, but some security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service pages clearly found. WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, though the website content and affiliation with Arkadia Digital Media suggest a legitimate operation. Overall, the site is professional and functional but could improve privacy compliance and security header implementation.

D

DewiKu

dewiku.com

51

DewiKu.com is a prominent Indonesian online media portal focused on women's lifestyle, fashion, beauty, and relationships. It operates under the umbrella of Arkadia Digital Media, a known media group with multiple partner sites. The website offers a rich content experience with regularly updated articles and community engagement features, targeting Indonesian female audiences. Technically, the site employs a modern tech stack including jQuery, Materialize CSS, Slick Carousel, and integrates Google Tag Manager and Analytics for tracking and performance monitoring. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is basic, lacking explicit cookie consent mechanisms and GDPR indicators. WHOIS data is missing or unavailable, which is unusual but the site’s association with a reputable media group supports legitimacy. Overall, the site is professional, content-rich, and technically sound with room for privacy and security enhancements.

H

HiTekno

hitekno.com

65

HiTekno.com is a well-established Indonesian technology news portal founded in 2014 and operated under the Arkadia Digital Media group. The site provides comprehensive coverage of technology topics including internet, gadgets, games, science, and geek culture, targeting Indonesian technology enthusiasts. The business model is primarily online media publishing supported by advertising revenue, with a strong market position as part of a larger media group with multiple sister portals. Technically, the website employs modern tracking and advertising technologies such as Google Analytics, Microsoft Clarity, Google Tag Manager, and multiple ad networks including Google Adsense and MGID. The site is hosted behind Cloudflare DNS and uses HTTPS with domain locking for security. However, DNSSEC is not enabled, and explicit security headers beyond domain locking are not observed. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms on the homepage. Contact information is limited to a phone number provided in structured data, and no contact emails or physical addresses are found. Overall, the website demonstrates good content quality, technical implementation, and business credibility but requires improvements in privacy compliance and security best practices.

B

BolaTimes

bolatimes.com

64

BolaTimes is an Indonesian sports media portal specializing in football news, match schedules, scores, and league coverage, targeting Indonesian football fans. The website demonstrates a solid market position as a regional sports news provider with a medium-sized operation founded in 2017. The technical infrastructure includes modern analytics and advertising technologies such as Google Analytics, Microsoft Clarity, Google Tag Manager, and multiple ad networks, supported by Cloudflare DNS and domain registration via GoDaddy. The site is mobile-optimized and SEO-friendly with structured data and social media integration. Security posture is adequate with HTTPS enabled and domain registration protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is supported by a comprehensive cookie consent mechanism, but lacks explicit privacy policy and terms of service pages. Overall, the website is professional and trustworthy with room for improvement in security policies and transparency.

M

MataMata

matamata.com

61

MataMata.com is a well-established Indonesian news portal founded in 1999, operating under the Arkadia Corp group. It offers a broad range of news content including politics, law, economy, entertainment, and viral topics, targeting Indonesian news consumers. The website maintains a strong market position with multiple sister sites and a comprehensive advertising model. Technically, the site uses modern analytics and advertising technologies such as Google Analytics, Microsoft Clarity, Google Adsense, and Facebook SDK, hosted behind Cloudflare for CDN and DNS services. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain locking, though DNSSEC is not enabled and some advanced security headers are missing. Privacy and cookie policies are present and linked, but GDPR compliance is limited. Contact information includes a verified phone number and social media presence. Overall, the site is professional, trustworthy, and technically mature, with room for security enhancements and formal security policy publication.

K

KG Media

kgmedia.id

64

KG Media is a leading Indonesian multi-platform media group operating under the Kompas Gramedia umbrella. The company offers a broad range of media services including digital, broadcast, print, and integrated marketing solutions. It holds a strong market position with multiple subsidiary media brands and a comprehensive digital ecosystem. Technically, the website employs modern web technologies such as YouTube IFrame API, Google Tag Manager, and Swiper.js, delivering a good user experience with multimedia content and responsive design. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of cookie consent and security policies indicates room for compliance improvement. Overall, KG Media presents a professional and trustworthy digital presence aligned with its business stature.

P

PT Gramedia Asri Media

gramedia.com

67

Gramedia.com is the largest and most trusted online bookstore in Indonesia, operated by PT Gramedia Asri Media. The website offers a comprehensive catalog of books and related products, targeting Indonesian consumers interested in literature and educational materials. The business model is e-commerce retail with a strong emphasis on official stores and promotional campaigns. The company maintains a significant market position as a leading book retailer in the region. Technically, the website is built on modern frameworks such as React and Next.js, incorporating various analytics and marketing tools including Google Analytics, Hotjar, TikTok Pixel, and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and employs standard security headers, reflecting a solid security posture. However, the absence of a visible cookie consent mechanism and explicit security or incident response policies indicates room for improvement in privacy compliance and transparency. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by the company's established market presence and consistent branding. Overall, Gramedia.com is a credible and professionally managed e-commerce platform with a strong business foundation and good technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen its trustworthiness and regulatory adherence.

K

Kompasiana.com

kompasiana.com

67

Kompasiana.com is a prominent Indonesian citizen journalism platform that enables users to share opinions and news, fostering a community of citizen media contributors. The website is well-branded and targets Indonesian-speaking audiences interested in diverse topics ranging from politics to lifestyle. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and multiple advertising networks, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and nonce-based script loading, though explicit privacy and cookie policies are not evident in the provided content, which is a compliance gap. The absence of WHOIS data for the domain introduces some uncertainty about domain legitimacy, though the website content and social media presence support its authenticity. Overall, the site is functional, professional, and content-rich but would benefit from enhanced transparency and compliance documentation.

K

Kompas.id

kompas.id

63

Kompas.id is a prominent Indonesian digital news platform offering comprehensive coverage across various domains including politics, economy, sports, and international news. The platform operates on a subscription-based model providing premium content to its audience. It targets Indonesian readers seeking quality journalism and up-to-date news. The website demonstrates a professional design with consistent branding and clear navigation, supporting a good user experience. Technically, Kompas.id leverages modern web frameworks such as Nuxt.js and Vue.js, and integrates multiple analytics and advertising technologies to optimize performance and marketing efforts. Security-wise, the site enforces HTTPS and employs several security best practices, though there is room for improvement in implementing comprehensive security headers and explicit security policies. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks visible privacy and terms of service documentation in the provided content. Overall, the domain registration data aligns well with the business profile, indicating a legitimate and established media entity.

S

Sako

sako.fi

65

Sako is a Finnish manufacturer specializing in rifles and ammunition, targeting hunters and firearm enthusiasts primarily in the United States through an authorized dealer network. The website presents a professional and consistent brand image with good content quality and clear product focus. Technically, the site uses modern frameworks such as Next.js and integrates analytics tools like Matomo and Google Analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and published security policies suggests room for improvement. The lack of WHOIS data transparency limits full trust verification, and the absence of privacy and contact information reduces compliance and business credibility scores. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

H

Härkila

harkila.com

75

Härkila is a well-established hunting apparel and equipment brand with a strong market presence in over 50 countries. The company offers a wide range of hunting clothes, footwear, and accessories targeting hunters and outdoor enthusiasts. The website reflects a professional e-commerce platform built with modern technologies such as React and Next.js, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website is trustworthy and credible but could improve transparency and security practices.

T

The Medical Journal of Australia

mja.com.au

67

The Medical Journal of Australia (MJA) is a prominent healthcare publication serving medical professionals and researchers primarily in Australia. It offers a wide range of medical research articles, editorials, guidelines, and educational content. The website is professionally designed and well-structured, reflecting its position as a leading medical journal affiliated with the Australian Medical Association. The business model relies on subscriptions, advertising, and content dissemination to healthcare audiences. Technically, the site is built on Drupal 10, leveraging modern web technologies including Google Analytics, Google Tag Manager, and Stripe for payment processing. The site is mobile-optimized and accessible, with moderate performance. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though some security headers could be improved. The WHOIS data is privacy protected by a reputable Australian registrar, which is typical for professional organizations. No signs of malicious activity or suspicious domain registration patterns were found. Privacy compliance is basic with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with strong business credibility and good security hygiene, though improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

P

Psychology Today

psychologytoday.com

63

Psychology Today is a well-established media and directory platform focused on psychology, mental health, and therapy services. It offers a comprehensive therapist directory, mental health resources, and a magazine subscription service, positioning itself as a leading resource for individuals seeking psychological help and information. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, CookieYes for consent management, and likely AWS hosting with Cloudflare CDN for performance and security. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing an excellent user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. WHOIS data is unavailable, indicating privacy protection or domain registration anomalies, which slightly impacts trust but is mitigated by the professional presentation and consistent branding. Overall, Psychology Today presents a trustworthy and authoritative online presence in its domain.

I

IRIS

irisnetwork.org

41

IRIS is a well-established global network of independent market research institutes, operating since 2003 with over 30 offices worldwide. The organization specializes in delivering comprehensive market research services, including public confidence studies and pharma industry research, targeting businesses seeking international market insights. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies such as jQuery, Bootstrap, Google Analytics, and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. Overall, the domain WHOIS data supports the legitimacy and long-term operation of the business. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

A

Auto & Service OÜ

auto-service.ee

42

Auto & Service OÜ is a small automotive service company based in Haapsalu, Estonia, operating since 2003. The company offers a range of automotive services including car repair, tire services, used car sales, and hand car wash. Since 2023, it has been the official Toyota service center in the region, providing factory-trained technicians and original Toyota parts, enhancing its market position and trustworthiness. The website is built on WordPress and uses common plugins and Google Analytics for tracking. It is mobile optimized and provides a basic GDPR-compliant cookie consent mechanism and privacy policy. However, no explicit contact emails or phone numbers are found on the main page, which could be improved for better customer engagement.

K

KALASTUSPOOD OÜ

boat-service.ee

40

Boat Service Estonia, operated by KALASTUSPOOD OÜ, is a specialized e-commerce and service provider focused on marine equipment including boats, boat motors, marine electronics, and accessories. Established in 2018, the company targets boat owners and marine enthusiasts primarily in Estonia, offering sales, maintenance, rental, and winter storage services. The website demonstrates a solid market position as one of the leading marine equipment sellers in the region, supported by a professional online presence and active social media engagement. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy and professionally managed, but could improve privacy and security transparency.

C

Carstop

carstop.ee

45

Carstop is an established Estonian car service network operating since 2003, providing a wide range of automotive repair and maintenance services through multiple physical workshops across Estonia. The website targets local car owners seeking professional and reliable auto repair solutions. The business model is based on a regional chain of service centers, emphasizing accessibility and professional expertise. The website content is well-structured, informative, and consistent with the brand identity, supporting a positive market position in the transportation sector.

STIK AS is an Estonian automotive service company specializing in vehicle dismantling, repair, maintenance, and parts sales. Operating multiple locations across Estonia including Rakvere, Paide, Tallinn, and Roosna-Alliku, the company serves a regional market with a focus on passenger cars, vans, SUVs, and commercial vehicles. Their services include accident repairs, painting, glass sales and replacement, tire services, and official dealership representation for Ford and Mazda in Lääne-Virumaa. The website reflects a medium-sized business with a service-oriented business model targeting vehicle owners and operators in Estonia. Technically, the website uses older JavaScript libraries such as jQuery 1.8.2 and integrates Google Analytics and Google Tag Manager for tracking. The site appears to be custom-built or uses a non-mainstream CMS, with basic mobile optimization and accessibility features. SEO is basic with minimal meta descriptions and no structured data markup. The site is accessible without WAF or blocking mechanisms. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries, which may expose it to vulnerabilities. There are no visible privacy or cookie policies, nor incident response contacts, indicating gaps in compliance and security posture. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the website scores moderately on content quality, technical implementation, and business credibility but scores low on privacy compliance and security posture. Strategic improvements in updating technology, implementing security best practices, and adding privacy policies would enhance trust and compliance.

A

Agroproff OÜ

agroparts.ee

46

Agroparts, operated by Agroproff OÜ, is an Estonian-based e-commerce retailer specializing in agricultural machinery parts and accessories, targeting primarily Estonian and Russian-speaking farmers and agricultural machinery users. The website offers a broad catalog of products including tractor parts, LED lights, and precision farming equipment, supported by financing options such as ESTO järelmaks. The company positions itself as a niche regional supplier with a focus on quality and customer service. Technically, the site is built on the ShopRoller platform, utilizing modern JavaScript libraries and Google Tag Manager for analytics and marketing, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and business legitimacy. No blocking or WAF interference was detected, allowing full content access and analysis.

Z

Zone Media OÜ

tooriistamarket.ee

48

Tooriistamarket.ee is a well-established Estonian retail business specializing in tools, workwear, chemicals, and related equipment, serving both professional tradespeople and general consumers. Founded in 2010 and operated by Zone Media OÜ, the company combines e-commerce with physical retail locations, offering a broad product range and additional services such as tool rental and installment payment options. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site is built on the Magento platform, leveraging modern JavaScript libraries and third-party marketing and analytics tools including Google Analytics, Facebook Pixel, and TikTok Pixel. The infrastructure is hosted and registered by Zone Media OÜ, ensuring consistency and control over the domain and hosting environment. Performance is moderate with room for optimization, and SEO practices are well implemented. Security posture is strong with HTTPS enforced, CSRF protections, and GDPR-compliant cookie consent mechanisms. However, explicit security headers like X-Frame-Options and Content Security Policy could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a comprehensive privacy policy and cookie management, though incident response and security policy disclosures are absent. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and maintaining regular audits of third-party scripts to sustain security and compliance.

A

Atlante OÜ

atlante.ee

43

Atlante OÜ operates the Atlante Autokeskus website, providing a comprehensive range of vehicle-related services in Tartu, Estonia, including vehicle sales, rentals, maintenance, and repair. The company has a well-established presence since 2003 and offers additional services such as office space rental and cooperation with insurance companies. The website is built on WordPress with WooCommerce, employing modern plugins and technologies to deliver a functional and visually appealing user experience. While the site is well-structured and mobile-optimized, it lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Security posture is generally good with HTTPS and reCAPTCHA integration, but could be improved by adding security headers and formal security policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

D

Duo Media Networks OÜ

pleier.ee

58

Pleier.ee is a leading Estonian media portal specializing in podcast and live radio streaming. Operated by Duo Media Networks OÜ, the platform aggregates popular Estonian radio stations and podcasts, providing users with a comprehensive listening experience. The website is well-positioned in the Estonian media market, targeting local podcast and radio audiences with a robust content offering and user-friendly interface. Technically, the site leverages modern web technologies including React, Google Tag Manager, and Piano Analytics, ensuring a responsive and performant user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility, though there is room for improvement in transparency around security policies and vulnerability disclosures.

A

AS Õhtuleht

ohtuleht.ee

59

Õhtuleht is a prominent Estonian news media website offering a wide range of content including news, sports, entertainment, opinions, and multimedia formats such as video, radio, and television. It serves the Estonian-speaking public with a comprehensive digital news platform supported by advertising and digital subscriptions. The website is well-branded and consistent with a strong market presence in Estonia's media sector. Technically, the site leverages modern web technologies including React with Next.js framework, integrates multiple advertising and analytics services such as Google Analytics, Gemius, and Cxense, and uses JW Player for video content. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the website enforces HTTPS with good SSL configuration and uses asynchronous script loading to optimize performance. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and does not publicly disclose security policies or incident response procedures. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages detected. Overall, the website is legitimate and trustworthy with consistent WHOIS data and a solid business model. The main risks relate to privacy compliance and security best practices, which could be enhanced to improve user trust and regulatory adherence.

K

Keskuskauppakamari

ilmoituskanava.fi

75

Ilmoituskanava.fi is a Finnish whistleblowing channel service operated by Keskuskauppakamari, providing organizations with an efficient and cost-effective platform to establish whistleblowing channels. The website is professionally designed using WordPress CMS, integrating modern SEO and cookie consent technologies such as Yoast SEO and Cookiebot. The service targets organizations requiring compliance with whistleblowing regulations, positioning itself as a niche government-related service in Finland. The domain registration data aligns well with the business entity, reinforcing legitimacy and trust. Technically, the website employs a standard WordPress stack with essential plugins for forms and analytics, hosted on Finnish nameservers. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Cookie consent is implemented with a clear mechanism, supporting GDPR compliance. Security headers and HTTPS are properly configured, contributing to a solid security posture. However, some areas such as accessibility and explicit security policies could be improved. Security-wise, the site shows no signs of vulnerabilities or exposed sensitive data. The use of third-party scripts is standard, with tracking and marketing cookies disclosed via Cookiebot. No incident response or vulnerability disclosure information is present, which could be a gap for security transparency. Overall, the site maintains a good balance of security, privacy, and usability. The overall risk assessment is low, with the site appearing trustworthy and compliant with relevant privacy regulations. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party integrations to mitigate potential risks.

A

Admicom

trackinno.com

57

Admicom is a Finnish technology company specializing in software solutions for fleet management, maintenance, and construction project management. Their product Trackinno offers digital tools to keep important fleet and maintenance information accessible anytime and anywhere. The company targets businesses in construction, real estate, and related sectors, providing SaaS solutions to improve operational efficiency. Technically, the website is built on the HubSpot CMS platform and integrates modern web technologies including Google Tag Manager, Cookiebot for consent management, and analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and provides a professional user experience with clear navigation and structured content. From a security perspective, the website uses HTTPS and cookie consent mechanisms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the website presents a professional and trustworthy front for Admicom's business offerings, but improvements in security transparency and WHOIS data availability are recommended to enhance trust and compliance.

M

MPY Telecom Oyj

mpy.fi

55

MPY Telecom Oyj is a Finnish telecommunications company specializing in providing fiber optic internet and reliable connectivity services to residential customers, housing companies, and businesses. Established in 2000, MPY has a strong market presence in Finland, offering high-speed internet solutions tailored for remote work, entertainment, and communication needs. The website reflects a professional and consistent brand image with clear service offerings and customer-centric content. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Matomo and Google Analytics, managed with a compliant cookie consent mechanism. Security-wise, the website enforces HTTPS, implements key security headers, and maintains good SSL configuration, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, MPY demonstrates a mature digital infrastructure and a trustworthy online presence, with room for improvement in security transparency and accessibility compliance.

LEADELL Pilv is a well-established Baltic law firm network providing comprehensive legal services to business clients across Estonia, Latvia, and Lithuania. The firm specializes in a broad range of legal sectors including tax, administrative law, real estate, mergers and acquisitions, healthcare, IT, dispute resolution, business law, and finance. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting business clients in the Baltic region. Technically, the site is built on WordPress with modern analytics and SEO tools, showing moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is partial, with a consent mechanism present but no explicit privacy or cookie policy pages found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Vetonaula

vetonaula.fi

70

Vetonaula is a Finnish IT service provider specializing in offering outsourced IT teams as a subscription-based service. The company targets Finnish businesses seeking to improve their IT solutions by leveraging expert IT teams easily and flexibly. The website presents a professional and modern digital presence, built on WordPress with integration of standard web technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for cookie consent management. Structured data is implemented to enhance SEO and provide clear organization information. Security posture is strong with HTTPS enforced and security headers present, although explicit privacy and terms of service policies are missing, which impacts compliance confidence. Contact information is not directly visible on the homepage, which may affect user trust and engagement.

H

Hendrix Genetics BV

hendrix-genetics.com

69

Hendrix Genetics BV is a leading multi-species animal breeding, genetics, and technology company specializing in sustainable and innovative breeding programs for various animal species including poultry, swine, and aquatic animals. The company positions itself as a key player in the animal protein value chain, emphasizing sustainability, animal welfare, and productivity. Their website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design that supports their market leadership claims. Technically, the site leverages modern JavaScript libraries, Google Tag Manager for analytics, and is hosted on Amazon CloudFront CDN, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though the absence of explicit security headers and a public security policy are areas for improvement. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the overall professional web presence and active content suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration status to improve trust and compliance.

T

TKM Grupp AS

tkmgroup.ee

45

TKM Grupp AS is a leading Estonian retail and wholesale group with a significant market share, employing over 4700 people and operating a large loyalty program with more than 750,000 customers. The group has a strong market position, recognized by multiple awards for competitiveness and led by experienced management. The website reflects a mature digital presence built on WordPress with modern SEO and analytics tools integrated. Security posture is strong with HTTPS and security headers implemented, though cookie consent and explicit contact details could be improved. Overall, the site is professional and trustworthy, supporting the company's business credibility and market leadership.

T

Tehy

tehy.fi

68

Tehy is Finland's largest trade union representing over 160,000 professionals in social, health, and education sectors. The organization provides advocacy, collective bargaining, member benefits, training, and legal support to its members. The website reflects a mature digital presence with comprehensive content tailored to its target audience of Finnish social and healthcare professionals. Technically, the site is built on Drupal 10 and integrates modern analytics and cookie consent tools, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced and likely security headers, though explicit security policies and incident response information are absent. Privacy compliance is partial, with cookie consent mechanisms present but no clear privacy or data protection officer information. Overall, the site is professional, trustworthy, and well-structured, supporting Tehy's position as a leading trade union in Finland.

Q

Qminder

qminder.com

67

Qminder operates as a SaaS platform specializing in queue management, appointment scheduling, and service analytics primarily targeting businesses in healthcare, government, retail, and banking sectors. The company positions itself as a leading provider in this niche, offering solutions that improve customer experience and operational efficiency. The website reflects a medium-sized business with a professional and consistent brand presence, supported by trust signals from well-known clients. Technically, the site employs modern JavaScript frameworks and integrates marketing and analytics tools such as HubSpot and Microsoft Clarity, ensuring a moderate to good level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, although the absence of a public security policy or incident response contact is noted. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. The WHOIS data is incomplete or privacy protected, which slightly impacts trust but does not outweigh the positive indicators from the website content and external trust signals. Overall, Qminder presents as a credible and professional business with room for improvement in transparency and security communication.

B

Baltresto

baltresto.se

45

Baltresto is a Swedish-based manufacturer and retailer specializing in high-quality hot tubs and saunas, offering a diverse product range including wood and fiberglass models with advanced features. The company operates a professional e-commerce platform built on WordPress and WooCommerce, targeting consumers seeking private garden spa solutions. The website demonstrates a solid technical infrastructure with modern plugins and integrations such as Google Tag Manager and Trustpilot, supporting marketing and customer trust. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though improvements in security headers and explicit policies are recommended. Overall, Baltresto presents a credible and professional online presence with room for enhanced privacy compliance and security transparency.

B

Baltresto

baltresto.fr

43

Baltresto is a European manufacturer specializing in outdoor saunas and Nordic hot tubs, with a strong presence in France and other European markets. The company emphasizes high-quality, durable, and affordable products, targeting consumers seeking private spa solutions for their gardens. Their e-commerce platform is built on WordPress with WooCommerce, offering a well-structured product catalog and integration with customer trust services like Trustpilot. The website is professionally designed, mobile-optimized, and SEO-friendly, supporting a positive user experience. Security posture is good with HTTPS and basic security practices, though there is room for improvement in security headers and incident response transparency. Privacy compliance is addressed with cookie consent and a privacy policy, but lacks explicit GDPR details and a dedicated data protection officer contact. Overall, Baltresto presents a credible and trustworthy online presence aligned with its business claims.

P

Print.com

print.com

74

Print.com operates as a professional print management platform targeting brands, agencies, resellers, and creatives. It offers a comprehensive catalogue of print products and services, including a web app, API, and digital asset management, connecting users to over 200 print partners across Europe. The platform emphasizes efficiency, collaboration, and sustainability, positioning itself as a trusted solution for frequent print buyers. Technically, the website is built on WordPress with modern SEO and analytics integrations, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. The lack of WHOIS registrant data introduces some uncertainty regarding domain legitimacy, but the professional presentation and compliance efforts mitigate this risk. Overall, the site demonstrates a mature digital presence suitable for its business model.

Brandt Group Oy Ltd is a family-owned industrial company based in Finland with a long history dating back to 1905. It operates as the parent company of Kolmeks Group, which specializes in manufacturing pumps and components with a global footprint including Finland, Estonia, China, and India. The website reflects a mature business with clear branding, professional content, and a focus on sustainability and quality. Technically, the site is built on WordPress with modern plugins and optimizations such as WP Rocket and Google Tag Manager, ensuring good performance and SEO. Security posture is solid with HTTPS enforced and email obfuscation, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Overall, the site presents a trustworthy and credible business presence with room for enhanced security transparency.