Security Directory

E

EasyMining

easymining.com

0

EasyMining is a company specializing in the development and implementation of sustainable industrial-scale processes aimed at creating true circularity, particularly in nutrient recycling. The website presents a professional and well-structured digital presence, targeting industrial stakeholders interested in sustainable resource management. The technical infrastructure leverages modern technologies including Episerver CMS, Microsoft Azure hosting, and advanced analytics tools such as Matomo, Piwik Pro, and Microsoft Application Insights, indicating a mature digital setup. Security measures are robust with HTTPS enforced and multiple security headers present, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, and no explicit contact or security policy information is provided on the site.

R

Ragn-Sells Group

ragnsells.com

0

Ragn-Sells Group is an environmental services company specializing in waste management and recycling solutions. The website presents a professional and well-structured digital presence, targeting businesses and organizations interested in sustainable environmental practices. The company leverages modern technologies including Episerver CMS and Microsoft Azure hosting, supported by advanced analytics tools such as Matomo, Piwik Pro, and Microsoft Application Insights. The website demonstrates good mobile optimization and accessibility features, enhancing user experience across devices. Security posture is strong with HTTPS enforced and detailed cookie consent mechanisms, although explicit security headers and incident response policies are not publicly visible. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall digital footprint and linked domains support the authenticity of the business. Strategic recommendations include enhancing transparency with published security policies, adding contact information, and improving security headers to further strengthen trust and compliance.

R

Ragn-Sells

ragnsells.se

0

Ragn-Sells is a well-established Swedish environmental company specializing in waste collection, treatment, detoxification, and recycling services for businesses, organizations, and households across Sweden. The website presents a professional and consistent brand image with clear messaging targeting its core audience in the environmental services sector. Technically, the site leverages modern cloud infrastructure on Microsoft Azure, uses Episerver CMS, and integrates advanced analytics and monitoring tools such as Matomo (Piwik Pro), Microsoft Application Insights, and New Relic. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and clear privacy policy references, indicating adherence to GDPR requirements. Security posture is generally strong with HTTPS enforced and secure analytics platforms in use; however, explicit security headers are not detected, and no visible contact information or security policies are provided, which could be improved. WHOIS data for the www subdomain is missing, likely due to querying the subdomain rather than the root domain, but this does not detract significantly from the overall legitimacy of the business. Overall, the website is professional, secure, and compliant, with room for enhancements in transparency and security header implementation.

A

Audioboom

audioboom.com

0

Audioboom is a well-established global podcast publisher founded in 2010, offering podcast hosting, distribution, and advertising services. The platform connects creators and advertisers with passionate audiences and supports distribution across major podcast platforms. The website reflects a professional and consistent brand with clear navigation and relevant content targeting podcasters, advertisers, and listeners. Technically, the site uses modern web technologies including React, Turbo, and Google Analytics, hosted with Cloudflare DNS and registered via Amazon Registrar. Security posture is solid with HTTPS enforced, CSRF protections, and client-side error reporting, though some security headers and DNSSEC are not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit security or incident response policies are published. Overall, the site is trustworthy and professionally maintained with a good balance of content quality, technical implementation, and privacy compliance.

V

Vision Australia Limited

visionaustralia.org

0

Vision Australia Limited is a well-established Australian non-profit organization founded in 2005, specializing in providing personalized services, technology, and support for individuals experiencing blindness and low vision. The organization holds a leading national position in the healthcare sector focused on vision impairment, offering a broad range of services including therapy, mobility, technology assessments, and support for healthcare professionals and businesses. Their website reflects a professional and comprehensive digital presence with clear navigation and extensive content tailored to their target audience. The technical infrastructure is robust, leveraging Drupal 10 CMS with integrations of modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Crazy Egg. Hosting and DNS services are managed via Cloudflare, providing good performance and security. The website is mobile-optimized and accessible, with good SEO practices in place. From a security perspective, the site enforces HTTPS, employs multiple security headers, and maintains domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, indicating a strong security posture overall. Overall, Vision Australia demonstrates a high level of business credibility and digital maturity, with a trustworthy online presence. Strategic recommendations include enabling DNSSEC, implementing a cookie consent banner for privacy compliance, and publishing explicit security policies and incident response contacts to further enhance trust and compliance.

B

Blind Android Users Podcast

blindandroidusers.com

0

Blind Android Users Podcast is a niche media platform dedicated to providing podcast content focused on Android accessibility for blind and visually impaired users. The website hosts a podcast player with multiple recent episodes and links to popular podcast platforms such as Spotify, Amazon Music, and Apple Podcasts. The target audience is primarily blind Android users and accessibility advocates. The business model revolves around content creation and community engagement, supported by donations and social media presence. Technically, the website is built on WordPress using modern plugins including Podcast Player, Gutenberg blocks, and performance optimizations via WP Rocket. It employs HTTPS with good SSL configuration and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. However, no hosting provider or domain registration details are available, raising questions about domain legitimacy. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy, cookie, or terms of service policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is present. The absence of WHOIS data for the domain is a significant concern, suggesting either a very new or unregistered domain, or use of privacy protection that is not reflected in the WHOIS query results. Overall, the website presents professional content and a good user experience but requires improvements in transparency, compliance, and security best practices. The domain legitimacy should be verified to ensure trustworthiness.

The website pinecast.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge, indicating that the content is blocked pending user verification. As a result, no business-specific content, contact information, or policies are available for analysis. The domain is registered with Cloudflare, Inc. since 2015, which suggests a legitimate registration but lacks detailed registrant information. The technical infrastructure relies on Cloudflare's security and WAF services, providing protection but limiting content visibility. Due to the blocked content, the security posture cannot be fully assessed, but the presence of Cloudflare's WAF and Turnstile indicates a baseline security mechanism. Overall, the site cannot be fully evaluated until the challenge is passed, and no privacy or compliance policies are visible in the current state.

L

Liviko

liviko.eu

0

Liviko is a well-established international group specializing in premium alcoholic beverages, with a strong market presence in the Baltic region and distribution across 60 markets. The company offers a range of services including distillery tours, production, export, and brand representation. Their website reflects a mature digital presence built on WordPress with modern SEO and privacy compliance tools. The technical infrastructure is solid, leveraging popular plugins and analytics services, and the site is mobile-optimized with good user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a professional and trustworthy online presence consistent with the company's business stature.

T

Tallink Grupp

tallink.ee

0

Tallink Grupp operates a comprehensive ferry and cruise service primarily in the Baltic Sea region, connecting Estonia with Finland, Sweden, and other destinations. The website offers ticket booking, hotel accommodations, cargo services, and a loyalty program, targeting leisure and business travelers. The digital platform is built on modern web technologies including Next.js and React, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms implemented, although explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data for the domain introduces some uncertainty, but the professional presentation and consistent branding support the legitimacy of the business. Overall, the website demonstrates a mature digital presence with room for improvement in transparency around security and incident handling.

C

Classictic.com

classictic.com

0

Classictic.com is an established online ticketing platform specializing in classical music concerts and opera events worldwide. Operating since 2002, it serves a global audience of classical music enthusiasts by providing secure online ticket purchases and official partnerships with prestigious venues. The website supports multiple languages and currencies, enhancing accessibility for international users. Technically, the site employs modern JavaScript libraries such as jQuery, Lightbox2, and tracking tools including Google Tag Manager and Hotjar, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and SEO, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent management implemented, though some security headers and explicit policies are missing. The absence of WHOIS data is a notable anomaly, but the website's trust indicators and certifications partially mitigate concerns. Overall, Classictic.com presents a reliable and professional service with room for improvement in transparency and security documentation.

A

Ahola Digital

attracs.com

0

Ahola Digital is a specialized digital solutions provider focused on the transportation and logistics industry, operating as part of the larger Ahola Group. The company offers software and digital services aimed at modernizing and optimizing transportation operations. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting B2B customers in the transportation sector primarily in Finland. Technically, the site is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, but lacks some advanced security headers and explicit security policy disclosures. The absence of WHOIS data raises concerns about domain registration transparency, which should be investigated further. Overall, the site is trustworthy and professional but could enhance transparency and security documentation to improve credibility and compliance.

The Options Clearing Corporation (OCC) operates as a central counterparty clearing house based in Chicago, specializing in equity derivatives clearing and settlement services for the U.S. listed-options markets. It holds a unique market position as the sole entity clearing and settling every listed-options trade in the country, serving 16 exchanges. The website reflects a mature, large-scale financial institution with a focus on secure market operations, risk management, and member services. Technically, the website employs a modern technology stack including jQuery, Axios, Chart.js, Moment.js, Google Analytics, Google Tag Manager, and Microsoft Application Insights for telemetry. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure analytics scripts, but lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were explicitly detected in the provided data, suggesting room for improvement. Privacy compliance is good with clear privacy and cookie policies, though no active cookie consent mechanism was found. Overall, the website presents a professional and trustworthy front for a critical financial market infrastructure entity. The absence of WHOIS data is a minor concern but likely due to query limitations or privacy services. Strategic recommendations include publishing formal security and incident response policies, implementing cookie consent mechanisms, and enhancing security headers to strengthen the security posture and compliance.

I

Interactive Advisors

interactiveadvisors.com

0

Interactive Advisors is a well-established robo-advisor platform affiliated with Interactive Brokers Group, offering low-cost, diversified investment portfolios with a focus on transparency and ease of use. The platform targets retail investors seeking automated portfolio management and self-directed trading options. The website demonstrates a high level of professionalism, with comprehensive content, clear navigation, and strong trust signals including SEC registration and SIPC protection. Technically, the site uses modern web technologies, is mobile-optimized, and performs well. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is robust with clear cookie consent and privacy policies. Overall, the site reflects a credible and mature financial service provider with a solid digital presence.

Softavenue Oy is a Finnish IT service provider specializing in cloud services, endpoint management, network solutions, hosting, IT support, and consulting. The company positions itself as a customer-focused and professional IT partner with a strong emphasis on quality and expertise. Their website reflects a well-structured and professional digital presence targeting business customers in Finland. The company was founded in 2018, consistent with the domain registration date, and maintains active social media profiles to engage with clients. Technically, the website is built on WordPress with common industry tools such as Yoast SEO, Google Analytics, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and performs moderately well, though some accessibility features are basic. Security is enforced via HTTPS, and forms are handled securely through Gravity Forms. However, the absence of security headers and published security or privacy policies indicates room for improvement in security posture and compliance. From a security perspective, the site shows good baseline practices with HTTPS and secure form handling but lacks explicit privacy, cookie, and incident response policies. Tracking and marketing scripts are present without visible consent mechanisms, which may pose GDPR compliance risks. No critical vulnerabilities or suspicious patterns were detected, and the domain registration details align well with the business claims, supporting legitimacy. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures, implementation of security headers, and cookie consent mechanisms to improve compliance and trustworthiness.

KOOS.io is a technology company founded in 2021 and registered in Estonia as Programmable Equity OU. The company offers a SaaS platform designed to motivate and reward contributors within platforms and marketplaces by sharing success through legal and technological solutions. Their key services include a company portal and shareholder app that enable tracking contributor impact and distributing rewards fairly. The website is professionally designed using modern frameworks such as Nuxt.js and Tailwind CSS, with integrations for analytics and user behavior tracking tools like Google Analytics, Hotjar, and Crazy Egg. Security is reasonably well implemented with HTTPS and domain transfer protections, but lacks published privacy, cookie, and security policies, which impacts compliance and trust. No WAF or blocking mechanisms were detected, and the domain registration data is consistent and transparent, supporting legitimacy.

G

Grünfin

grunfin.com

0

Grünfin's website indicates that the business is closed, with minimal content and no active business information or contact details. The site is hosted on Google Sites and uses HTTPS with good SSL configuration, but lacks privacy policies, terms of service, and security headers. The WHOIS data is unavailable, suggesting the domain may be unregistered or expired, which aligns with the business closure message. Overall, the digital presence is minimal and does not support active business operations.

E

Elkdata OÜ

mentornaut.ee

0

Mentornaut is an Estonian online platform founded in 2020 by Elkdata OÜ that connects students with private tutors for personalized learning sessions both online and in-person. The platform targets students and tutors across Estonia, offering flexible scheduling and a variety of subjects. The website is professionally designed using React and Material-UI, hosted behind Cloudflare DNS, and integrates social media channels for broader engagement. While the site provides essential business information and user testimonials, it lacks explicit contact details and a cookie consent mechanism, which are important for user trust and regulatory compliance. Security posture is moderate with HTTPS likely enabled but missing explicit security headers and vulnerability disclosures.

K

Kingdom Technologies Ltd.

kingdom.garden

0

Kingdom Technologies Ltd. is a UK-based technology company specializing in the design and manufacture of robotic lawn mowers tailored for large commercial terrains. Their product leverages advanced sensor fusion technology to enable mowing in challenging environments such as shaded areas, and offers remote operation capabilities via a dedicated app. The company positions itself competitively in the commercial robotic lawn mower market, emphasizing cost efficiency and enhanced safety features. The website infrastructure is built on Webflow, utilizing modern web technologies including Google Fonts and jQuery, and is hosted likely via Webflow's platform with Cloudflare CDN integration. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security measures include HTTPS enforcement and the use of Cloudflare Turnstile captcha on forms, indicating awareness of bot mitigation and form abuse prevention. From a security perspective, while HTTPS is properly implemented, the site lacks explicit security headers and published privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data for the domain is a notable concern, reducing transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, Kingdom Technologies Ltd. presents a professional and focused digital presence with solid technical foundations but would benefit from enhanced transparency, security policies, and WHOIS data availability to improve trust and compliance.

Vumonic Datalabs is a technology company specializing in AI-powered market intelligence and consumer transaction data analytics. Founded in 2016 and headquartered in Estonia, it leverages a large email receipts panel primarily in India with plans for global expansion. The company targets buy-side and sell-side funds, corporates, and brands seeking actionable insights to drive smarter decisions. The website reflects a modern, professional digital presence built on Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS and domain registration protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, lacking cookie consent mechanisms despite use of Google Analytics. Overall, the business demonstrates credibility with consistent WHOIS data and clear market positioning.

B

Bob W

bobw.co

0

Bob W operates a hospitality platform offering climate-neutral, design-focused short-stay apartments across multiple European cities. The company emphasizes sustainability, local design, and customer convenience with features like contactless access and 24/7 support. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and domain protections, though improvements in security headers and explicit policies are recommended. Overall, the business presents a credible and trustworthy online presence with room to enhance privacy transparency and security best practices.

S

Salv

salv.com

0

Salv is a Finland-based technology company specializing in financial crime prevention solutions, including AML compliance, fraud detection, and KYC risk scoring. The company offers a modular SaaS platform trusted by over 100 financial institutions across Europe, positioning itself as a key player in the fintech and banking sectors. Salv's platform emphasizes intelligence sharing and automation to enhance the effectiveness of fincrime teams. Technically, the website is built on HubSpot CMS with integrations of modern analytics and marketing tools such as Google Analytics, Hotjar, and CookieYes for consent management. The site is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong, with ISO 27001 and SOC 2 Type 2 certifications prominently displayed, and best practices like HTTPS enforcement and cookie consent implemented. No critical vulnerabilities or exposed sensitive data were detected. Overall, Salv demonstrates a mature digital presence with a professional, user-friendly website that aligns well with its business objectives and compliance requirements.

FoodDocs is a specialized SaaS provider offering intuitive food safety management software tailored for hospitality, healthcare, and retail sectors. The company positions itself as a market leader with top-rated software solutions that streamline compliance, monitoring, and traceability processes. Their platform is designed for ease of use, enabling businesses to set up food safety systems quickly and efficiently. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools to deliver a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security and incident response policies are not publicly detailed. Privacy compliance is well addressed with GDPR-compliant cookie consent and privacy policies. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which slightly impacts overall trustworthiness. Strategic recommendations include publishing detailed security policies, incident response plans, and improving domain registration transparency to enhance credibility.

X

Xolo OÜ

xolo.io

0

Xolo OÜ is a technology company founded in 2015, specializing in providing comprehensive business solutions tailored for solopreneurs and freelancers globally. Their platform offers services including virtual company invoicing without registration (Xolo Go), e-Residency company formation and management (Xolo Leap), accounting, tax reporting, and compliance support. The company positions itself as a trusted partner for independent business owners seeking to simplify administrative burdens and operate remotely. The website demonstrates a strong market presence with over 130,000 users and invoicing clients from 150 countries, indicating a mature and scalable business model. Technically, the website employs a modern tech stack with integrations of Google Analytics, HubSpot, Freshchat, and other marketing and analytics tools, ensuring robust user engagement tracking and customer support capabilities. The site is well-optimized for mobile devices, features clear navigation, and uses structured data for SEO enhancement. Performance is moderate, with room for optimization in loading speed. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not visible in the HTML, the use of reputable third-party services and absence of exposed sensitive data indicate a solid security posture. However, the site could benefit from publishing a formal security policy and vulnerability disclosure program to enhance transparency and incident response readiness. Overall, Xolo presents a professional, trustworthy, and user-centric platform with strong business credibility and compliance awareness. The lack of WHOIS data transparency is mitigated by consistent website content and social proof. Strategic recommendations include enhancing security header implementation, formalizing security policies, and continuous monitoring of third-party integrations to maintain a high security standard.

The website nftport.xyz is currently inaccessible, returning a 403 Forbidden error with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information. The domain is registered via Namecheap with privacy protection based in Iceland since 2021, which aligns with a small technology startup profile but no further business details are available. The lack of accessible content and absence of metadata, scripts, or contact information indicates the site may be under maintenance, restricted, or misconfigured. From a security perspective, no headers or SSL details are available, and no privacy or cookie policies are present, indicating a poor security posture and compliance gap. Overall, the site cannot be properly evaluated in its current state, resulting in a low trust and credibility score.

F

Fractory

fractory.com

0

Fractory is a well-established UK-based manufacturing service provider specializing in scalable metal fabrication solutions for engineering businesses. Founded in 2000, the company offers a comprehensive range of services including laser cutting, CNC machining, welding, and prototyping, supported by 1-1 engineering assistance and flexible payment terms. Their market position is strengthened by a professional online platform that facilitates instant quoting and order management, targeting project and series manufacturing clients primarily in the UK and Europe. The website reflects a mature digital presence with multi-language support and integration of modern marketing and analytics tools.

S

Specialist VC

specialist.vc

0

Specialist VC is a venture capital fund focused on supporting early-stage technology startups primarily in Estonia, Latvia, Lithuania, Finland, Ukraine, and Belarus. The fund invests mainly in pre-seed to Series A rounds, with occasional secondary investments in later rounds. Their portfolio includes over 60 companies, many of which are recognized regional tech leaders. The website presents a professional and consistent brand image, with detailed team bios and clear contact information, positioning Specialist VC as a credible and established player in the regional VC ecosystem. Technically, the website is built on WordPress with modern plugins such as Rank Math for SEO and uses jQuery and Splide.js for interactive elements. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. HTTPS is enforced, ensuring secure communications. From a security perspective, the site has a solid SSL configuration but lacks some security headers and does not provide a vulnerability disclosure or incident response contact. Privacy compliance is partial, with an ESG policy page but no dedicated privacy or cookie policy pages, nor cookie consent mechanisms. Contact information is comprehensive, including multiple team emails and phone numbers. Overall, Specialist VC's website reflects a mature business with a strong market position and good technical implementation. However, improvements in privacy compliance and security best practices would enhance trust and regulatory adherence.

T

Telia Eesti AS

keila.ee

0

Keila.ee is the official municipal website for the city of Keila, Estonia, providing residents and visitors with comprehensive information about city services, news, events, and contact details. The website is managed under the domain registered by Telia Eesti AS since 2010, indicating a stable and legitimate online presence. The site targets local citizens and tourists, offering resources such as job postings, municipal announcements, and tourism information. Technically, the site is built on WordPress with Elementor and Ova Framework plugins, leveraging modern web technologies like Bootstrap and FontAwesome for design and functionality. The website demonstrates good mobile optimization and accessibility features, ensuring usability across devices.

T

Telia Eesti AS

kaustik.ee

0

Kaustik.ee is an Estonian information system platform primarily serving the education sector, offering document register services and secure user authentication including Estonian electronic ID methods. The platform is operated under the domain registered by Telia Eesti AS, a reputable telecom provider in Estonia, indicating a legitimate and regionally focused service. The website content is basic but functional, with a focus on user login and document access. Technically, the site uses a proprietary WebDesktop system with modern JavaScript libraries such as jQuery and Bootstrap, providing a moderate level of digital maturity. However, SEO and accessibility features are minimal, and no advanced analytics or marketing tools are detected. Security posture is adequate with HTTPS and secure login options but lacks important security headers and privacy policies, which are critical for GDPR compliance and user trust. Overall, the site is moderately trustworthy but would benefit from enhanced security and privacy measures.

Z

Zone Media OÜ

kooliraamatukogud.ee

0

The website kooliraamatukogud.ee serves as a digital catalog platform named RIKSWEB for Estonian school libraries, enabling users to search library collections, view item statuses, and access news literature and events. It targets educational institutions in Estonia, providing a niche service that supports library management and user engagement. The platform is operated by Zone Media OÜ, a known Estonian registrar and hosting provider, which aligns with the website's regional and sector focus. Technically, the website employs a modern yet simple technology stack including jQuery and Google Fonts, with multiple CSS stylesheets for styling and responsive design. The site is mobile-optimized and offers a clear navigation structure, although SEO optimization is minimal. No CMS or advanced frameworks are detected, indicating a custom or lightweight solution. Performance is moderate, with no evident blocking or WAF interference. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, and no contact details for security matters are provided. These gaps reduce the overall security posture and privacy compliance. Overall, the website is functional and professionally presented for its educational purpose but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

H

Harju Maakonnaraamatukogu

keilaraamatukogu.ee

0

Harju Maakonnaraamatukogu is a regional public library serving Harju County in Estonia, providing a range of library services including book lending, children's services, local history resources, and event hosting. The website targets local residents and library users, offering information and access to library resources and services. The business operates as a public institution with a focus on education and cultural enrichment. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, hosted under a reputable Estonian registrar. The site is mobile-optimized, accessible, and uses HTTPS for secure communication. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

K

Keila Muusikakool

keilamuusikakool.ee

0

Keila Muusikakool is a small local music school based in Keila, Estonia, providing music education services primarily to students and parents in the local community. The website offers detailed information about competitions, study programs, schedules, events, and pricing. The business operates with a clear focus on education and community engagement. Technically, the website is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

T

Tervise Arengu Instituut

terviseinfo.ee

0

Terviseinfo.ee is a well-established Estonian health information portal managed by the Tervise Arengu Instituut, a government-affiliated health development institute. The website provides comprehensive health promotion content, news, and educational resources targeted primarily at health promotion specialists and the general public. It covers a broad range of health topics including alcohol, HIV/AIDS, nutrition, mental health, and more, positioning itself as a trusted national resource for health information. Technically, the site is built on Joomla CMS and utilizes common JavaScript libraries such as MooTools and jQuery, along with Google Fonts and Google Analytics for tracking. The site is served over HTTPS, ensuring secure communication, and includes CSRF tokens in forms to protect against cross-site request forgery. However, it lacks explicit security headers like Content-Security-Policy and HSTS, and does not have a visible cookie consent mechanism or privacy policy page, which are important for GDPR compliance. From a security perspective, the website demonstrates a moderate security posture with secure form handling and HTTPS usage but could improve by implementing additional HTTP security headers and publishing clear privacy and cookie policies. No WAF or blocking mechanisms were detected, and the site content is fully accessible. The WHOIS data aligns well with the website's governmental health mission, showing a consistent and legitimate registration since 2011. Overall, the website is professional, trustworthy, and serves its public health mission effectively, but should enhance privacy compliance and security headers to strengthen its security posture and regulatory adherence.

L

Liikuma Kutsuv Kool, TÜ liikumislabor

liikumakutsuvkool.ee

0

Liikuma Kutsuv Kool is an educational innovation program based in Estonia, affiliated with the University of Tartu's Movement Laboratory. The program aims to promote a more active school culture across Estonian schools by providing training, research, and networking opportunities. It is supported by government ministries and recognized as an evidence-based intervention by the Health Development Institute. The website is well-structured, professionally designed, and uses modern WordPress technologies with good SEO and mobile optimization. Contact information and social media presence are clearly provided, enhancing trust and accessibility. However, the site lacks explicit privacy and cookie policies, which impacts GDPR compliance and privacy posture. Security practices are generally good with HTTPS and standard security headers, but no dedicated security or incident response policies are published.

Stuudium operates an e-school platform primarily targeting students, parents, and teachers in Estonia. The website serves as a portal for users to select their school and log in to the platform. The business model is SaaS-based, providing educational institutions with digital tools for school management. The platform appears to have a moderate market position within the Estonian education sector, focusing on usability and accessibility for its target audience. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with assets hosted on a dedicated CDN domain. The site is basic in design and functionality, with minimal content and limited SEO or accessibility features. Mobile optimization is present but basic. No advanced frameworks or CMS platforms are detected from the provided HTML. From a security perspective, the site uses HTTPS (assumed from external asset URLs), but no explicit security headers or policies are visible. The form disables autocomplete and autocorrect to enhance input security. However, the absence of privacy, cookie, and terms of service policies indicates gaps in compliance with GDPR and other regulations. No contact or incident response information is provided, limiting transparency and trust. Overall, the website is functional but basic, with moderate business credibility but limited privacy and security maturity. Strategic improvements in compliance documentation, security headers, and user trust signals are recommended to enhance the platform's security posture and regulatory adherence.

S

Beste Online Casino Österreich | 50+ Seriöse Online Casinos

spielautomatcasinos.at

0

The website spielautomatcasinos.at serves as an informational platform focused on online casinos in Austria, particularly slot machine casinos. It provides reviews, comparisons, and guides aimed at Austrian online gambling enthusiasts. The business model appears to be affiliate marketing and content provision within the gambling niche. Technically, the site employs Cloudflare for DNS and CDN services and likely uses WordPress as its CMS. The site implements lazy loading scripts to optimize performance and is mobile-friendly, though accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. Contact and incident response information are absent, limiting user trust and compliance transparency. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence.

K

オンラインカジノ日本 ⚡️ 日本のベストカジノオンライン

kajinojapan10.com

0

KajinoJapan10.com is a Japanese language online casino affiliate and informational website targeting Japanese players interested in legal and reputable online casinos. The site provides detailed casino reviews, bonus offers, payment method guides, and legal context about gambling in Japan. The business model is primarily affiliate marketing, promoting various international online casinos accessible to Japanese users, often via VPN. Technically, the site is built on WordPress with common performance and user experience optimizations, including mobile responsiveness and SEO best practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to missing privacy and cookie policies. No direct contact or incident response information is provided, which limits transparency. Overall, the domain registration is consistent and supports legitimacy. Strategic improvements in privacy, security headers, and contact transparency would enhance trust and compliance.

P

Playversity

playversity.co

0

Playversity is an educational platform focused on transforming teaching through game-based learning. The website offers games, resources, learning opportunities, and programs for trainers, targeting educators and learners interested in innovative educational methods. The business is relatively new, founded in 2021, and operates primarily online with a small organizational size. The platform maintains a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress using Elementor and several addons, hosted on HostGator. The infrastructure is modern and supports mobile responsiveness and SEO best practices. Performance is moderate, with room for improvement in accessibility and security headers. The site uses HTTPS and domain registration includes protective EPP locks, but DNSSEC is not enabled. From a security perspective, the site has a good baseline with HTTPS and domain protections but lacks critical security headers and privacy compliance documents such as privacy and cookie policies. No forms or data collection mechanisms were detected on the homepage, reducing immediate data protection concerns. The WHOIS data shows privacy protection for the registrant, which is reasonable for this business type. Overall, the website is functional and professional but should improve privacy compliance and security posture to enhance trust and regulatory adherence.

P

Placet Group OÜ

laen.ee

0

Laen.ee is a well-established Estonian financial services provider specializing in a variety of loan products including credit cards, credit lines, consumer loans, and business loans. The company targets both private individuals and businesses within Estonia, offering flexible and user-friendly loan solutions. The website reflects a mature digital presence with clear service descriptions, a modern UI, and localized content in Estonian. Technically, the site employs standard web technologies such as JavaScript, jQuery, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and headers could be enhanced. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

M

Moneyzen

moneyzen.ee

0

Moneyzen is an Estonian-based online financial platform specializing in providing personal loans and investment opportunities through a transparent and empathetic approach. The platform targets individuals seeking flexible loan options and investment avenues, operating primarily in the Estonian market with multilingual support. The business model centers on connecting borrowers and investors, offering various loan types including personal, renovation, travel, health, auto, education, and refinancing loans. Despite recent challenges leading to the cessation of new loan and investment applications as of June 6, 2025, Moneyzen remains committed to servicing existing contracts and investor accounts. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager, reCAPTCHA, Hotjar, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, although explicit security policies and incident response information are absent. Overall, Moneyzen presents a professional and trustworthy online presence with clear business information and contact channels. The domain registration aligns well with the business claims, enhancing legitimacy. However, improvements in privacy compliance documentation, security policy transparency, and incident response readiness are recommended to strengthen trust and regulatory adherence.

B

Bondora

bondora.ee

0

Bondora is a well-established Estonian financial services company specializing in personal loans. The website presents a professional, user-friendly platform that facilitates quick loan applications with transparent terms and flexible repayment options. The company has a strong market presence with over 1.5 million applicants and 17 years of experience, positioning it as a trusted lender in the region. Technically, the site leverages WordPress with Bricks Builder, integrates modern web technologies, and employs robust cookie consent mechanisms to ensure GDPR compliance. Security posture is strong with HTTPS, anti-forgery tokens, and Cloudflare protections, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, good privacy practices, and a mature digital infrastructure.

C

Creditea

creditea.ee

0

Creditea is a financial services provider offering transparent and flexible credit accounts primarily targeting consumers in Estonia and the Baltic region. The company is part of the IPF group and serves over 1.7 million customers across nine countries. Their services include credit lines and payment accounts accessible via web and mobile applications, emphasizing ease of use and transparency with no hidden fees. The website is professionally designed, mobile-optimized, and provides a user-friendly experience with clear navigation and relevant content in Estonian. Technical infrastructure leverages modern web technologies such as React and Next.js, with integrations for analytics and advertising through Google Tag Manager and Bing Ads. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website demonstrates a mature digital presence with good security and privacy practices but would benefit from clearer contact information and verified domain registration details.

M

Multitude Bank p.l.c.

ferratum.ee

0

Ferratum, operated by Multitude Bank p.l.c., is a well-established financial services provider specializing in quick and flexible online loans primarily targeting Estonian customers. The company is part of the larger Multitude Group, with a strong market presence since 2005 and operations in multiple countries. Their website offers a user-friendly experience with clear loan products, responsible lending information, and customer engagement through blogs and reviews. Technically, the site leverages modern frameworks such as Next.js and React, integrates third-party services like Salesforce chat and EmbedSocial reviews, and maintains good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure identification methods, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence with high trustworthiness and compliance with privacy regulations.

R

Raha.ee

raha.ee

0

Raha.ee is an Estonian financial advice platform established in 2016, offering practical guidance on earning, saving, and investing money. The website serves primarily individuals seeking to improve their personal finances through educational content and loan comparison tools. It holds a leading position in the Estonian market for financial advice websites, leveraging affiliate partnerships with multiple loan providers to monetize its services. Technically, the site is built on WordPress with modern web technologies, including JavaScript libraries and translation services, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and safe external linking practices, though explicit security headers and policies are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

K

Kimbi.lv mājas lapa ir slēgta.

kimbi.lv

0

Kimbi.lv is a Latvian financial services website that is currently closed, as indicated by the website content. The site serves primarily as a notice redirecting customers to Vivus.lv for customer service inquiries, suggesting a business consolidation or closure. The website is built on the Webflow platform and hosted on AWS infrastructure, using standard web technologies such as jQuery and Google Fonts. The digital presence is minimal, with no interactive forms or detailed business information available. Security posture is basic with no advanced security headers or policies visible, and privacy compliance is lacking due to absence of privacy or cookie policies. Overall, the site functions as a placeholder with limited content and minimal user engagement features.

The website vizia.lv is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, which blocks direct access to any substantive content. Due to this, no business information, contact details, or policies are visible. The site is protected by Cloudflare's security infrastructure, indicating an intent to secure the site from automated access or attacks. However, the lack of accessible content and absence of privacy or cookie policies limits the ability to assess the business or compliance posture. The technical infrastructure relies on Cloudflare services, but the user experience is negatively impacted by the challenge page. Security posture benefits from Cloudflare's protections but lacks visible security headers or policies. Overall, the site presents a low trust and content quality profile due to blocked access.

C

CreditOn.lv

crediton.lv

0

CreditOn.lv is a Latvian-based online lending platform established in 2007, offering short-term loans and credit lines to consumers aged 20 to 75. The company operates transparently with clear terms and a strong focus on customer trust and data security. It has a significant market presence in Latvia and several international subsidiaries, indicating a mature and expanding business model. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript libraries and analytics tools, though it appears to be custom-built without a common CMS. Security posture is good with HTTPS enforced and secure login forms, but could be improved by adding explicit security headers and publishing security policies. Privacy compliance is well addressed with a visible cookie consent mechanism and a comprehensive privacy policy. Overall, the site demonstrates high business credibility and trustworthiness.

A

AS 4finance

vivus.lv

0

Vivus.lv is an established Latvian online lending platform operated by AS 4finance, offering quick credit services up to EUR 10,000 with flexible terms up to 60 months. The website targets Latvian consumers seeking fast and accessible online loans. The business is positioned as a significant player in the Latvian financial services market with a clear focus on digital lending solutions. The site demonstrates a good level of digital maturity, employing modern technologies such as Cloudflare for security, AWS for hosting, and Google Tag Manager for analytics and marketing. Cookie consent management is comprehensive and GDPR compliant, reflecting a strong commitment to privacy and regulatory adherence. Security posture is solid with HTTPS enforced and Cloudflare protection, though explicit security headers and incident response information are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and well-optimized for mobile and accessibility, supporting a positive user experience and business credibility.

S

SIA IPF Digital Latvia

credit24.lv

0

Credit24 is a Latvian-based consumer credit provider offering flexible credit lines up to 7000 EUR with no commission fees and fast disbursement times. The company operates under SIA IPF Digital Latvia and holds a valid consumer credit license, serving primarily Latvian consumers with an easy online application process. The website is built on modern React technology with integrated analytics and tracking tools, providing a good user experience and mobile optimization. Security measures such as HTTPS and security headers are properly implemented, and privacy compliance is addressed with comprehensive policies and consent mechanisms. Overall, Credit24 demonstrates a mature digital presence with strong business credibility and security posture.

S

SIA Ondo

ondo.lv

0

Ondo is a Latvian-based financial services company specializing in providing fast online credit loans up to 5000 EUR with flexible repayment options. Positioned as a reliable player in the Latvian online lending market, Ondo targets consumers seeking quick and convenient credit solutions. The website is professionally designed, mobile-optimized, and provides clear information about its services, supported by a consistent brand presence and active social media channels. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Smartlook analytics, and Tawk.to live chat, ensuring a responsive and interactive user experience. Security posture is strong with HTTPS enforced, comprehensive cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies, indicating adherence to GDPR requirements. Overall, Ondo demonstrates a mature digital presence with good business credibility and technical implementation.