Medium-risk security reports

The website 'Marché des Objets Graphiques' serves as an online presence for a recurring event organized by étapes magazine, focusing on graphic and artisanal objects. It targets creative professionals and enthusiasts in France, particularly in Paris, providing a platform for showcasing and selling unique graphic works and crafts. The site is well-structured, visually consistent, and uses modern web technologies including WordPress and Google Analytics for tracking visitor engagement. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and branding align with a known magazine entity. Security posture is adequate with HTTPS and spam protection, but lacks comprehensive security headers and visible privacy compliance documentation. Overall, the site is functional and professional but would benefit from improved compliance and transparency measures.

DIELINE STUDIO operates as a specialized brand and packaging consultancy focused on innovation, sustainability, and manufacturing matchmaking. Leveraging the authority of the DIELINE platform, it targets brands and designers seeking strategic design and sustainable packaging solutions. The website is professionally designed on Squarespace, featuring rich visual content and clear service descriptions. Technically, the site employs modern web technologies with good SSL security and moderate performance. However, the absence of privacy and cookie policies, lack of explicit contact emails or phone numbers, and missing WHOIS registration data introduce trust and compliance concerns. Security posture is solid with HTTPS and HSTS enabled, but additional security headers and incident response information are recommended. Overall, the site presents a credible business front but requires improvements in transparency and compliance to enhance trustworthiness.

Dieline Awards is a well-established global packaging design competition with a 15-year history, targeting designers, studios, and brands worldwide. The website is professionally designed using Squarespace, featuring multimedia content, clear navigation, and partnerships with industry events and organizations. The technical infrastructure leverages modern web technologies and tracking tools, ensuring a good user experience and moderate performance. Security posture is strong with HTTPS and HSTS, but lacks explicit privacy and cookie policies, which impacts compliance. The absence of WHOIS data raises concerns about domain legitimacy, though the brand's market presence and partnerships provide mitigating trust signals. Overall, the site is functional and credible but would benefit from enhanced transparency and compliance documentation.

Kravia is a cloud-based SaaS provider specializing in automated debt collection software, invoicing services, and portfolio management. The company integrates with popular accounting platforms to streamline financial operations for businesses. Their website demonstrates a modern technical infrastructure leveraging Webflow CMS, Cloudflare CDN, and multiple analytics and marketing tools. Security posture is strong with HTTPS enforcement, use of Auth0 for authentication, and a comprehensive cookie consent mechanism. However, explicit privacy and terms of service pages are not found, which slightly impacts privacy compliance scoring. WHOIS data is unavailable, likely due to privacy protection, which is common for SaaS companies but limits full legitimacy verification. Overall, Kravia presents as a professional and trustworthy service provider in the finance technology sector.

Sysdec is an Estonian software company specializing in financial and economic software solutions, primarily through its SAF product line. The website focuses on providing updates about software versions, regulatory compliance changes, and company achievements such as the 'Edukas Eesti Ettevõte 2025' certification and a Creditinfo AA rating. The target audience is primarily Estonian businesses requiring accounting and tax software solutions. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript with jQuery 1.12.4, but the use of an outdated jQuery version presents a security risk. The site is accessible without any WAF or blocking mechanisms, but lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security headers are not evident, and no contact information or incident response channels are provided on the analyzed page, limiting transparency and security posture. Overall, the website is functional and professional but would benefit from modernization and enhanced security and privacy practices.

Directo äritarkvara is a well-established Estonian business software provider specializing in ERP, accounting, financial management, warehouse, production, and CRM solutions. The company holds a strong market position in Estonia with the largest user base for web-based business software. Their business model is SaaS, targeting Estonian and regional businesses, supported by multilingual websites for neighboring countries. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS and cookie consent mechanisms, but there are gaps such as missing advanced security headers and a misconfiguration in Cookiebot domain group authorization. No privacy policy or terms of service pages were detected, which impacts compliance and trust. WHOIS data confirms domain legitimacy with consistent registration since 2010. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures.

Inodia is a small regional digital agency based in Brittany, France, specializing in web design, SEO, and digital marketing services. The company targets local businesses and professionals in Lamballe, Rennes, and surrounding areas, offering tailored digital solutions to enhance online presence. The website is built on WordPress using Elementor and optimized with WPRocket, reflecting a modern and performant technical infrastructure. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Security posture is solid with HTTPS enforced and security headers present, though no explicit security policy or incident response information is published. The absence of WHOIS data limits domain trust assessment but the professional website and clear contact information support legitimacy. Overall, Inodia presents a credible and professional digital presence with room for improvement in transparency around security policies and domain registration details.

AVCO Productions Ltd is a London-based creative technology studio specializing in delivering digital projects for educational institutions, cultural organizations, architectural practices, and artists. The company positions itself as a niche provider focusing on creative technology solutions, editorial systems for storytelling, and live event delivery. Their website showcases a portfolio of projects emphasizing design efficiency and meaningful digital experiences. Technically, the website is built using modern frameworks such as Gatsby and React, leveraging a headless CMS (Sanity) and Google Tag Manager for analytics. The site is mobile-optimized with good design quality and user experience, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and incident response contact information. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

OpenReplay is a technology company specializing in open-source session replay and product analytics solutions that can be self-hosted, providing customers full control over data security and privacy. The company targets product teams, engineering, customer support, and enterprises seeking privacy-focused analytics tools. Their market position is as a competitive alternative to commercial session replay platforms, emphasizing data security and compliance. The website demonstrates a mature digital infrastructure using modern frameworks like Astro, integrates analytics and chat tools, and is hosted on AWS infrastructure. Security posture is strong with HTTPS, domain lock statuses, and SOC 2 Type 2 compliance, though explicit security policies and incident response details are not published. Overall, the company presents a professional, trustworthy, and technically sound offering with a strong community presence.

HARJU ELEKTER UAB is a Lithuanian contract manufacturing company specializing in engineering and production of multi-drive systems, power distribution, and prototyping services primarily for industrial and marine sectors. The company operates under the Harju Elekter Group and offers Engineer-To-Order, Make-To-Order, and Assemble-To-Order business models. Their market position is that of a specialized manufacturer with capabilities for fast marine class certification and full load testing. The website is professionally designed using WordPress with Cherry Framework and Bootstrap, featuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and incident response information are lacking. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible and established business with room for improvement in security and privacy transparency.

Harju Elekter Oy is a leading Finnish company specializing in electrical and automation technology solutions, serving industrial, energy, and transportation sectors. The company offers a broad range of services including electrical system manufacturing, transformer production, electrical contracting, and electric vehicle charging solutions. Their market position is strong within Finland and internationally, supported by a reputable parent company, Harju Elekter Group. The website reflects a professional and consistent brand image with comprehensive content tailored to B2B clients. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Cookiebot for compliance. The infrastructure is stable with good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and use of Google reCAPTCHA, though some security headers could be improved. Overall, the security posture is mature with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence. The domain registration details are consistent and transparent, reinforcing trustworthiness. Strategically, the company should enhance security headers, publish explicit security policies, and maintain regular updates to sustain their strong security and compliance stance.

WhosOn is a UK-based technology company specializing in advanced live chat and AI-driven chatbot solutions tailored for enterprise businesses. Established in 2003, the company offers a comprehensive suite of services including live chat software, AI chatbots, help desk integration, analytics, and flexible deployment options such as on-premises and cloud hosting. Their market position is strong within the UK, supported by long-term operation and recognized certifications. The website reflects a professional and consistent brand image targeting large-scale, regulated industries requiring secure and scalable communication tools. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Blazor WebAssembly, and FontAwesome, hosted on AWS infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and cookie consent mechanisms. Analytics are implemented via Statcounter and Google Tag Manager, indicating moderate user tracking. From a security perspective, the company demonstrates a solid posture with HTTPS enforcement, encryption, intrusion prevention, and data masking. Certifications such as Cyber Essentials and FSQS further reinforce trust. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for enhancement. Incident response contact details and vulnerability disclosure policies are not publicly visible, which could be improved to strengthen transparency and readiness. Overall, WhosOn presents a credible, secure, and professional online presence with minor gaps in privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, implementing a visible cookie consent mechanism, publishing incident response contacts, and enhancing security headers to elevate trust and compliance.

UPGREAT is an Estonian-based e-commerce retailer specializing in used and guaranteed Apple devices such as iPhones, MacBooks, iPads, and Apple Watches. The company positions itself as the largest provider of checked used Apple products in Estonia, offering a two-year warranty to customers. The website is built on WordPress with WooCommerce, leveraging modern marketing and analytics tools including Google Tag Manager, TikTok Pixel, Hotjar, and Klaviyo, indicating a mature digital marketing infrastructure. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations. However, explicit privacy and terms of service policies are not detected in the provided content, which may impact compliance and user trust.

PixaHive is a small, donation-supported media platform providing free stock photos under the Creative Commons CC0 public domain license. It targets photographers, content creators, and marketers seeking unrestricted image use. The platform operates on WordPress, leveraging common web technologies and Cloudflare DNS for performance and security. The website is well-structured with good SEO and mobile optimization, offering a positive user experience. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and explicit security policies. Privacy compliance is basic, with no cookie consent despite tracking pixels. Overall, the site is legitimate and trustworthy but could improve in privacy and security transparency.

SleepAngel Global operates a specialized e-commerce platform focused on filtered bedding products that provide clinically clean comfort and protection against allergens and pathogens. The company positions itself as an innovator in medical-grade bedding technology, with notable partnerships such as the Movistar Cycling Team. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations for multilingual support, customer reviews, and marketing analytics. Privacy and cookie compliance are well implemented, reflecting GDPR adherence. Security posture is solid with HTTPS and form protections, though explicit security policies and incident response details are absent. Overall, the site presents a professional and trustworthy front with room for enhanced security transparency.

Suomen Hostingpalvelu Oy is a Finnish technology company specializing in domain registration, web hosting, and website building services. Established in 2008, it has positioned itself as a trusted local provider with a strong emphasis on customer service and technical reliability. The company offers a range of hosting packages, including AI-assisted WordPress hosting, targeting both individual and business customers in Finland. Their partnership with Suomen Yrittäjät further strengthens their market credibility. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, and integrates multiple analytics and marketing tools like Google Analytics, Hotjar, and Trustmary. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Hosting servers are located in Finland, ensuring good performance and compliance with local data regulations. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It employs cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, Suomen Hostingpalvelu Oy demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable service provider in the Finnish hosting market. Strategic enhancements in security transparency and incident response readiness would further strengthen their security posture.

Infobuild Oy is a Finnish technology company specializing in business intelligence, data integration, and software solutions. Established in 1998, the company offers a range of services including technical consulting, BI and data support, training, and SAP-related services. Their market position is supported by a long-standing domain registration and a focused product portfolio including TIBCO and SAP solutions. The website reflects a professional and consistent brand image targeting businesses seeking advanced data solutions. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Elementor, hosted by Hostingpalvelu. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and security headers, but lacks DNSSEC and published security policies. Privacy compliance is partial with cookie consent but no dedicated privacy policy page. Overall, the site is trustworthy and credible with room for improvement in privacy and security transparency.

XiBE is a Netherlands-based technology company offering a cloud-based ideas realization platform designed to facilitate employee collaboration in idea sharing, selection, and execution. The website presents a modern, user-friendly interface hosted on the Weebly platform, targeting organizations seeking to enhance bottom-up innovation. The platform emphasizes ease of use and community engagement, supported by client testimonials and logos from reputable organizations. Technically, the site employs standard web technologies including jQuery and Google Analytics, with moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the site is professional and credible but would benefit from enhanced privacy compliance and security best practices.

Farmwell operates as a specialized e-commerce platform targeting food hubs, farms, and online grocery stores, focusing on food box delivery and recurring order management. The platform is built on the Shoperb CMS and offers tailored features such as box customization, delivery, and inventory management. The website is professionally designed with good user experience and mobile optimization, though accessibility and SEO could be improved. Security posture is moderate with HTTPS usage but lacks explicit security headers and policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies are missing, which impacts compliance and user trust. Overall, the site presents a niche e-commerce solution with room for improvement in security and compliance.

Aspo Plc is a Finnish conglomerate specializing in demanding B2B customers, operating primarily in Northern Europe and selected growing markets. The company owns and develops businesses in sectors including shipping (ESL Shipping), food industry solutions (Leipurin), and industrial supplies and logistics (Telko). Aspo positions its subsidiaries as market leaders, focusing on sustainable and long-term value creation. The website reflects a professional corporate presence with comprehensive investor relations, governance, and sustainability information. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries such as jQuery, Highcharts, and Slick Carousel. It integrates Google Analytics and Google Analytics 4 for visitor tracking and employs a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published incident response contacts or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional and consistent website content. Overall, Aspo Plc's website presents a credible and professional business front with room for improvement in security best practices and transparency regarding domain registration and incident response.

AS Latvijas Maiznieks is a well-established Latvian bakery company founded in 2003, specializing in a wide range of bakery and confectionery products including breads, cakes, frozen bakery goods, and snacks. The company targets retail consumers as well as institutional clients such as schools and kindergartens. Their website reflects a mature digital presence with detailed product catalogs, news updates, and social media integration, supporting their market position as a leading bakery brand in Latvia. Technically, the website uses standard web technologies including jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and basic security headers, though improvements such as DNSSEC and advanced security headers are recommended. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, indicating awareness of GDPR requirements. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

Neway is an award-winning brand and experience design agency based in Estonia, with a domain age consistent with its claimed business history since 2007. The company specializes in creating brands and experiences from strategy through execution, targeting businesses seeking high-quality creative services. The website showcases a professional portfolio with multimedia content and highlights multiple industry awards, positioning Neway as a reputable player in the creative agency market. Technically, the website uses modern JavaScript frameworks such as Vue.js, integrates multiple analytics and marketing tools, and is hosted by Zone Media OÜ. Security posture is strong with HTTPS enforced, reCAPTCHA on forms, and cookie consent implemented, though explicit security policies and incident response information are absent. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the website is professional, trustworthy, and technically sound, with room for improvement in privacy and security transparency.

Surface Digital s.r.o is a Czech Republic-based digital and communication agency with over 14 years of experience, offering comprehensive services including web programming, e-commerce solutions, graphic design, and marketing campaigns. The company targets businesses seeking integrated digital solutions and positions itself as a reliable regional agency with a strong portfolio and client base. Technically, the website is built on modern technologies such as PHP, Nette framework, and WordPress CMS, with good SEO, mobile optimization, and accessibility. Security posture is solid with HTTPS, security headers, and anti-bot measures like Google reCAPTCHA, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, slightly impacting business credibility. Overall, the website is professional, trustworthy, and technically sound, serving as a strong digital presence for the company.

Theflywheel.app's landing page at /lander is currently a minimal placeholder or parking page with very limited content. The site primarily loads a JavaScript bundle and a CSS stylesheet from wsimg.com and includes a Google Adsense script, indicating monetization attempts but no substantive business content or user engagement features. There are no visible privacy, cookie, or terms of service policies, nor any contact information or social media links. The lack of content and metadata suggests the site is either under development or not actively maintained. From a technical perspective, the site uses basic JavaScript and CSS assets but lacks modern SEO, accessibility, and performance optimizations. No CMS or frameworks are detected beyond the static assets. The absence of HTTPS or security headers in the provided data raises concerns about security posture. No forms or data collection mechanisms are present, limiting privacy compliance considerations. Security evaluation indicates a poor posture due to missing HTTPS, lack of security headers, and no visible incident response or vulnerability disclosure information. The site does not provide any trust or compliance signals, which negatively impacts its credibility and user trust. Overall, theflywheel.app's landing page is not currently suitable for business or user engagement and requires significant improvements in content, security, compliance, and technical implementation to be considered a professional and trustworthy website.

The website weandthecolor.com is currently inaccessible due to a database connection error, resulting in no visible content or metadata for analysis. The domain is registered with IONOS SE since 2010, indicating a stable and legitimate registration history. However, the lack of accessible content prevents assessment of business operations, services, or compliance policies. Technically, the site shows no evidence of modern security headers or DNSSEC, and the SSL configuration could not be verified. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations. Overall, the website's current state represents a critical operational and security risk that must be addressed promptly.

DIELINE is a well-established media platform founded in 2007, specializing in packaging innovation and design insights. It serves a niche audience of packaging professionals, designers, and brand managers by providing news, interviews, award programs, and a job board. The website operates on a WordPress CMS with WooCommerce for memberships and advertising revenue streams. The technical infrastructure includes modern tracking and marketing tools such as Google Analytics, TikTok Pixel, LinkedIn Insight, and Sendinblue for email marketing. The domain is registered with GoDaddy and uses Cloudflare DNS, with multiple domain lock statuses enhancing domain security. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy. Overall, the website is professional, content-rich, and credible but could improve in privacy and security transparency.

Étapes is a well-established French media company specializing in design, image, and visual communication since 1994. The website serves as a digital magazine platform offering editorial content, subscription services, event agendas, and job listings targeted at design professionals and enthusiasts. The company maintains a consistent brand presence across multiple social media platforms, reinforcing its market position as a reference media in its sector. Technically, the website is built on WordPress with WooCommerce integration for e-commerce capabilities, leveraging modern web technologies and SEO plugins to optimize content delivery and user experience. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and explicit privacy and cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is professional and functional but would benefit from enhanced transparency and security practices.

The website formfiftyfive.com/lander currently serves as a minimal landing or parking page with very limited content and no visible business information or user engagement features. The domain is well-established, registered since 2007, and uses standard registrar and DNS providers, indicating legitimacy. However, the site lacks essential elements such as privacy policies, contact information, and meaningful content, which significantly limits its business and security posture. Technically, the site uses modern JavaScript technologies including React and loads scripts from wsimg.com, a common hosting for parking pages. The presence of Google Adsense scripts suggests monetization attempts through advertising. Performance and mobile optimization appear basic, with no advanced SEO or accessibility features detected. From a security perspective, the site does not present any immediate red flags such as WAF blocks or exposed vulnerabilities but also lacks security headers and DNSSEC, which are recommended for improved security. The absence of privacy and cookie policies and contact information reduces compliance with GDPR and general trustworthiness. Overall, the website scores low on content quality, privacy compliance, and business credibility, reflecting its current status as a placeholder rather than an active business site. Strategic improvements should focus on developing meaningful content, implementing privacy and security policies, and enhancing user engagement to improve trust and compliance.

Thisispaper, Inc. operates a niche media website focused on art, design, and architecture, providing curated stories, travel guides, and a membership subscription model called Thisispaper+. The company targets creative professionals and enthusiasts seeking high-quality cultural content. The website is built on modern web technologies including Webflow CMS, Memberstack for membership management, and integrates payment gateways such as Stripe and PayPal. Analytics tools like Google Analytics and Microsoft Clarity are used for user behavior insights. Security posture is good with HTTPS enforced and secure payment integrations, though explicit security headers could be improved. Privacy compliance is limited with no clear privacy or cookie policies detected, which is a risk area. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the website is professional, content-rich, and technically sound but would benefit from enhanced privacy disclosures and domain registration clarity.

Proact UK is a leading European specialist in IT infrastructure, security, and workspace solutions, delivering expert consulting, services, and 24/7 support focused on data management, backup, cybersecurity, networking, and modern workspace environments. The company positions itself as a trusted partner for businesses seeking cloud transformation, private and public cloud solutions, data centre modernization, and operational resilience. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and cookie consent management via Cookiebot. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. WHOIS data for the exact domain 'www.proact.co.uk' is unavailable due to it being a subdomain, but related domains and website content support legitimacy. Overall, the site demonstrates a solid business and technical foundation with room for enhanced privacy and security disclosures.

The website p6drad-teel.net presents minimal content with a simple HTML structure containing only a title, a single image, and one internal link. There is no visible business description, contact information, or user engagement features. The domain is registered since 2005 with Gandi SAS, indicating a long-standing registration but the website itself lacks substantive content or clear business identity. Technically, the site does not demonstrate modern web practices such as HTTPS, security headers, or SEO optimization. The absence of privacy and cookie policies, as well as contact details, further reduces trust and compliance posture. Security posture is weak due to lack of HTTPS and security best practices. Overall, the site appears to be either underdeveloped or abandoned, with low business credibility and poor user experience.

The website www.er500.ee is an educational and cultural platform managed by the Estonian Literary Museum (Eesti Kirjandusmuuseum). It focuses on presenting the 500-year history of Estonian books, including important publications, literary works, and historical events. The platform offers thematic content, timelines, and allows users to create and share stories, targeting literature enthusiasts, researchers, and the general public interested in Estonian cultural heritage. Technically, the site is built on Drupal 10 CMS, utilizing modern JavaScript libraries such as Zoomist and FontAwesome, and integrates Google Analytics for user tracking. The site is mobile-optimized with a clear navigation structure and professional design. Security-wise, the site uses HTTPS and asynchronous script loading but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the domain registration aligns well with the website's cultural mission, indicating legitimacy and trustworthiness.

The website folklore.ee is an authoritative academic and cultural platform managed by the Estonian Literary Museum's Folklore Department. It provides extensive resources on Estonian folklore, oral traditions, and related research projects, targeting scholars, students, and the interested public. The site is primarily in Estonian with some multilingual content and serves as a key national repository and dissemination channel for folklore knowledge. Technically, the site uses a stable but basic infrastructure with FreeBSD and PostgreSQL, and includes Google Analytics for visitor tracking. However, it lacks modern CMS features and advanced mobile optimization. Security posture is moderate with HTTPS implied but no explicit security headers or incident response information published. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Business credibility is high given the institutional backing and consistent domain registration. Overall, the site is functional and trustworthy but would benefit from enhanced privacy, security, and technical modernization.

Accurat.ai is a technology company specializing in AI-powered market research and data analytics solutions. The website presents a modern and professional design, targeting businesses seeking advanced market insights. The technical infrastructure leverages modern frontend frameworks such as Nuxt.js and is hosted via Cloudflare, indicating a reasonable level of digital maturity. However, the website lacks critical compliance and security documentation such as privacy policies, cookie consent mechanisms, and incident response plans. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC. Overall, the site is accessible and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

Recreativ operates as a native advertising network connecting over 20,000 partner publisher websites and reaching more than 500 million users monthly. The company focuses on personalized native ads and dynamic retargeting to convert audiences into buyers, positioning itself as a significant player in the digital advertising ecosystem. Their business model centers on providing advertisers and publishers with advanced AdTech solutions to optimize audience engagement and monetization. The website demonstrates a mature digital infrastructure with modern technologies including Google reCAPTCHA, Google Tag Manager, and Iubenda for privacy compliance, supported by a Laravel backend inferred from route structures. The site is well-optimized for mobile and SEO, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and bot protection, though lacking explicit security policies and HTTP security headers. Privacy compliance is robust, featuring granular cookie consent and GDPR adherence. Overall, the website is professional, trustworthy, and technically sound, with room for improvement in security transparency and accessibility.

A Million Ads (AMA) is a technology-driven company specializing in dynamic creative advertising for audio platforms. They position themselves as a leader in delivering customized, data-driven audio ads across major platforms, serving notable clients such as Target, Starbucks, and American Express. The website reflects a mature digital presence with professional design, strong branding, and extensive client showcases. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, and LinkedIn Insight Tag. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, though some security headers are not explicitly detected and no dedicated security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing or indicates the domain is unregistered or privacy protected, which conflicts with the professional image and client portfolio, raising legitimacy concerns. Overall, the site is functional, professional, and compliant but would benefit from improved transparency on domain registration and security policies.

9Dots is a Mediatech service provider specializing in advanced monetization solutions for publishers and app developers. Their offerings include header bidding, video and audio monetization, and app distribution services aimed at maximizing ad revenue and audience engagement. The company positions itself as an industry connector with innovative native monetization technologies. Technically, the website is built on WordPress using Elementor, with modern libraries such as jQuery and FontAwesome, and integrates Google Analytics and reCAPTCHA for analytics and security. The site is well-designed, mobile-optimized, and provides a good user experience. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing or unavailable, raising concerns about domain legitimacy. Overall, the website is functional and professional but requires improvements in transparency and security documentation.

ABCS Insights is a data analytics and marketing measurement company founded in 2020, specializing in leveraging a large single-source database of North American retail sales data to optimize marketing campaigns across multiple channels. The company targets marketing professionals and media companies seeking data-driven insights to improve campaign effectiveness. The website presents a professional and consistent brand image with clear navigation and good content quality, emphasizing their key services such as ad measurement, audience optimization, brand awareness tracking, and sales impact analysis. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Cloudflare services, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced, Cloudflare DNS and bot protection via Turnstile captcha, and a cookie consent mechanism supporting GDPR compliance. However, there is room for improvement in DNS security (DNSSEC not enabled), security headers, and publishing formal security policies or incident response contacts. Overall, the domain registration data aligns well with the business claims, showing a consistent and legitimate online presence.

Aarki, Inc. operates as an AI-enabled mobile marketing platform specializing in user acquisition and re-engagement services for mobile publishers and brands. The company leverages AI technology combined with privacy-first engagement and unified creative strategies to optimize mobile advertising campaigns and drive revenue growth. Positioned as a full-service marketing platform, Aarki emphasizes privacy compliance and advanced programmatic advertising techniques to deliver measurable ROI for clients. Technically, the website is built on WordPress with modern SEO and marketing integrations including Yoast SEO, HubSpot, Google Tag Manager, and Vimeo for multimedia content. The site is mobile-optimized, accessible, and employs cookie consent mechanisms aligned with GDPR requirements. The technical infrastructure reflects a mature digital presence with moderate performance and good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data reduces transparency but the professional presentation and privacy compliance measures support a positive security posture. Overall, Aarki presents a credible and professional business with strong digital marketing capabilities and privacy awareness. Strategic improvements in security transparency and direct contact information would enhance trust and compliance further.

iPromote is a mature and established company specializing in programmatic digital advertising solutions. Their platform offers automated, scalable, and white-labeled advertising services across multiple channels including display, paid search, CTV/OTT, social media, native, video, and Yelp ads. The company positions itself as an industry leader with award-winning technology and a strong partner ecosystem. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site is built on WordPress with advanced SEO and performance optimizations, integrating tools like Google Tag Manager, HubSpot, and Jetpack for analytics and marketing. Security posture is solid with HTTPS enforced and domain protections in place, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the business credibility is high, supported by consistent branding and social media presence.

152 MEDIA is a specialized AdTech company focused on delivering innovative programmatic advertising solutions for publishers and buyers. With over 14 years of experience, the company operates a dedicated development lab leveraging AI to enhance digital advertising profitability and campaign performance. The website reflects a mature business with a clear market position and a professional digital presence. Technically, the site is built on WordPress with modern frameworks and includes essential security features such as HTTPS and Google reCAPTCHA. Privacy compliance is addressed through a cookie consent mechanism and a privacy policy, though terms of service and security policies are not explicitly found. The security posture is solid but could be improved by adding security headers and formal incident response information. Overall, the website is trustworthy, well-maintained, and aligned with the business claims.

014 ON is a Spanish media company specializing in premium omnichannel data management and advertising solutions. They leverage proprietary technology to detect users in physical environments via wifi and Bluetooth signals, enabling highly precise audience targeting and activation through online campaigns. Their business model centers on a Data Management Platform (DMP) combined with an in-house Trading Desk to operate cross-device advertising campaigns. The company positions itself as a leader in exclusive advertising supports in specific environments, focusing on affinity and precision rather than broad coverage. The website content is professionally presented, targeting brands and advertisers seeking advanced omnichannel marketing solutions.

eKool is a well-established educational platform based in Estonia, offering a comprehensive school management system that facilitates communication, administrative tasks, and academic tracking for schools, parents, and students. The platform is positioned as a trusted solution with a strong presence in the Estonian education sector, supported by multiple certifications and partner integrations with notable educational service providers. Technically, the website is built on Webflow CMS and leverages modern web technologies such as GSAP and Swiper.js to deliver a responsive and engaging user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some improvements in security headers and explicit policies could enhance trust. Privacy compliance is generally good, with a comprehensive privacy policy present, but lacks a cookie consent mechanism. Overall, eKool demonstrates a mature digital presence with strong business credibility and a high-quality website experience.

Opiq is a well-established Estonian cloud-based educational platform operated by Star Cloud OÜ, offering a comprehensive digital learning environment aligned with the national curriculum. It serves a broad audience including schools, teachers, students, parents, and private users, providing interactive textbooks and learning materials from leading Estonian publishers. The platform supports multiple user roles and integrates with popular school management systems, enhancing its utility and market position. Technically, the website leverages modern JavaScript frameworks, Microsoft Azure cloud hosting, and Application Insights for telemetry and analytics. The platform is accessible via web browsers and dedicated mobile apps for iOS and Android, ensuring good mobile optimization and user experience. The site demonstrates good SEO and accessibility practices, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses anti-forgery tokens in forms, and implements cookie consent mechanisms. However, it lacks a publicly available security policy and incident response contact information, which are recommended for enhanced trust and compliance. No critical vulnerabilities or suspicious patterns were detected, and the domain registration details align well with the business claims, indicating high legitimacy. Overall, Opiq presents a professional, secure, and user-friendly digital education platform with strong business credibility and compliance posture. Strategic improvements in security transparency and incident response readiness would further strengthen its position.

Edumus Education OÜ operates the Edumus platform, offering engaging and practical online courses targeted at primary and secondary school youth in Estonia and Ukraine. The platform emphasizes hybrid learning with live online classes and self-paced assignments, supported by expert-created curricula. The company has established a credible market presence with over 100 specialists contributing to education content and partnerships with educational foundations. Technically, the website is built on Squarespace, leveraging modern analytics and marketing tools, and provides a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers are recommended. Overall, Edumus demonstrates a trustworthy and professional online presence aligned with its educational mission.

The PASCH-Initiative website represents a well-established global educational network promoting German language learning through over 2,000 partner schools worldwide. The initiative offers diverse services including learning materials, competitions, school partnerships, youth courses, and alumni projects. The website is professionally designed with consistent branding and targets German language learners and educational institutions globally. Technically, the site uses modern web technologies such as jQuery, Bootstrap, Bitmovin Player, and a consent management platform (Usercentrics), hosted on Microsoft Azure DNS infrastructure. Performance and mobile optimization are good, with accessibility and SEO well addressed. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are absent. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact is primarily via a contact form; no direct emails or phone numbers are published. Overall, the site is trustworthy, professional, and aligned with its educational mission.

Pilet.ee is a well-established Estonian online platform specializing in public transportation ticket sales and management of the Ühiskaart travel card. Operated by Ridango AS, the service provides users with convenient access to tickets across multiple regions and transport types in Estonia. The website offers clear navigation and service descriptions targeting public transport users, supporting multiple languages including Estonian, English, and Russian. The platform integrates with regional ticketing subdomains and partners such as Omniva for card sales. Technically, the website employs standard web technologies including JavaScript, jQuery, and Google Analytics for user tracking. DNS is managed via Cloudflare, but DNSSEC is not enabled. The site uses HTTPS, ensuring encrypted communications, but lacks advanced security headers which could improve protection against common web threats. Mobile optimization and accessibility are basic but functional. From a security perspective, the site demonstrates a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as a consent mechanism despite the use of Google Analytics, indicates compliance gaps with GDPR and privacy best practices. No incident response or security policy information is publicly available. Overall, Pilet.ee is a credible and professional service with a solid market position in Estonia's transportation sector. Strategic improvements in privacy compliance, security headers, and user consent mechanisms would enhance trust and regulatory adherence, supporting long-term operational security and customer confidence.

Infopank is Estonia's largest business information platform, providing a comprehensive suite of services including competition reports, marketing lists, sales agent tools, certificates, data interfaces, debt registers, and background information. The platform targets Estonian businesses and professionals seeking reliable business data to support growth and decision-making. Technically, the website leverages modern frameworks such as Next.js and React, integrates Google Tag Manager, Facebook Pixel, Hotjar, and a consent management platform (Didomi), indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit privacy and security policies are not found in the provided content. Overall, the site is professional, functional, and trustworthy, with room for improvement in privacy compliance documentation and accessibility.

Eesti Töötukassa is the official Estonian Unemployment Insurance Fund, providing employment services, unemployment benefits, and labor market support to Estonian residents and employers. The website serves as a government portal offering information and access to services related to employment and social security. It targets job seekers, employers, and the general public in Estonia. The site is well-branded, consistent, and professionally designed with good content relevance and navigation clarity. The presence of language options enhances accessibility for non-Estonian speakers. Technically, the website is built on modern Angular framework (version 18.2.13) and uses contemporary web technologies including Google Fonts, Material Icons, and Matomo analytics. The site is mobile-optimized and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Cookie consent mechanisms are implemented, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not found, which could be improved to enhance transparency and trust. The WHOIS data confirms the domain is legitimately registered to the Estonian government entity, supporting high trustworthiness. Overall, the website is a reliable and professional government resource with a solid technical and security foundation. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure information, and providing direct security contact channels to improve security posture and user trust.

Corgea is an AI-driven security platform focused on automatically detecting, triaging, and fixing insecure code, targeting developers and security teams. The company appears to be a small technology startup founded in 2020, offering SaaS solutions in the cybersecurity domain. The website is professionally designed using Framer, with good content relevance and user experience, though it lacks explicit privacy and cookie policies as well as contact information. Technically, the site uses modern analytics and marketing tools such as HubSpot and Google Analytics, but lacks security headers and DNSSEC, which are recommended for enhanced security. The domain registration is consistent and transparent, registered with NameCheap since 2020, aligning with the company's startup profile. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices.