Medium-risk security reports

Valio Eesti AS is a well-established dairy manufacturing company founded in 1992, operating primarily in Estonia. It produces and markets fresh dairy products and cheeses sourced mainly from Central and Southern Estonian farms. The company holds a strong market position as one of the largest local dairy producers, supported by a professional and content-rich website targeting Estonian consumers. The website demonstrates a mature digital infrastructure using modern technologies such as React, Azure hosting, and integrated analytics tools including Google Analytics and Hotjar. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, with clear contact information and social media presence enhancing trust. Overall, the website reflects a high level of professionalism and business credibility.

The website leegohansson.com is currently inaccessible due to an origin web server downtime, as indicated by the Cloudflare 521 error page. The domain is very recently registered (July 2024) and uses Cloudflare as a CDN and security provider. There is no accessible business content, contact information, or policies available on the site, which severely limits the ability to assess the business or its market position. Technically, the site relies on Cloudflare but lacks DNSSEC and security headers, and the server is currently non-responsive. The security posture is weak due to the downtime and lack of standard security configurations. Overall, the site presents a high risk due to unavailability and lack of transparency, and it is recommended to restore server availability, implement security best practices, and publish necessary compliance policies to improve trust and security.

The Institute of World Politics is a specialized graduate school focused on educating future leaders in national security, intelligence, diplomacy, and military strategy. It offers a range of graduate degree programs, certificates, and continuing education opportunities tailored to professionals and students seeking careers in statecraft and international affairs. The institution positions itself as a niche leader with a strong emphasis on scholar-practitioner faculty and practical skills development. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrations such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site is hosted likely on SiteGround, with good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and does not expose sensitive data in the HTML. However, there is no publicly visible security policy or incident response page, and no vulnerability disclosure mechanism was found. The WHOIS data is unavailable or restricted, typical for .edu domains, but the domain's legitimacy is supported by the content and .edu status. Overall, the site demonstrates a strong professional presence with good security hygiene, though it could improve transparency around security policies and incident response. The business is credible and well-positioned in its educational niche, with a clear target audience and robust digital infrastructure.

Ferdio is a Denmark-based visual communication agency founded in 2014, specializing in creating infographics, animations, presentations, and other visual storytelling content. The company targets businesses and organizations that require professional visual explanations of complex information. Their market position is supported by a portfolio featuring notable clients and a consistent brand presence across their website and social media channels. Technically, the website is built on WordPress hosted on WP Engine, utilizing modern web technologies such as jQuery, Vimeo API, and Google Analytics, with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms compliant with GDPR. However, there is room for improvement in security headers and publishing formal security policies or incident response plans. Overall, Ferdio presents a professional, trustworthy, and well-maintained digital presence with moderate technical maturity and good privacy compliance.

Chudovo is a well-established software development company founded in 2004, offering a broad range of IT services including custom software development, dedicated development teams, application maintenance, and cloud development. The company targets businesses seeking scalable and innovative software solutions, leveraging AI and machine learning technologies to enhance delivery speed and quality. With multiple international offices and a strong portfolio of over 160 projects, Chudovo positions itself as a reliable partner in the technology sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, optimized for mobile and SEO. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site uses standard plugins for forms and code highlighting, and implements lazy loading for images to improve load times. From a security perspective, the site enforces HTTPS and employs clientTransferProhibited domain status, but lacks DNSSEC and advanced security headers. Contact forms include CAPTCHA and an NDA option, enhancing data protection. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure mechanism is present. Overall, the website demonstrates a solid business and technical foundation with good content quality and user experience. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic, with cookie consent present but no dedicated privacy policy page detected. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website lasitamaja.com/lander is a newly registered domain (August 2023) currently serving a minimal placeholder or parking page with no substantive business content. The site uses React and JavaScript technologies and includes Google AdSense scripts, indicating an intent to monetize traffic. However, there is no visible business information, contact details, privacy or cookie policies, or terms of service, which limits trust and credibility. Technically, the site is hosted via GoDaddy with domain status locks enabled but lacks DNSSEC and security headers, which are important for domain and web security. The minimal content and lack of SEO or accessibility features suggest a low level of digital maturity. No forms or user data collection mechanisms are present. From a security perspective, the absence of HTTPS enforcement details, security headers, and privacy compliance measures indicates a basic security posture with room for improvement. The domain registration is consistent with a new business but the lack of transparency and content reduces confidence. Overall, the site scores low on content quality, privacy compliance, and business credibility, with moderate technical implementation.

Ave Munde is a small lifestyle and wellness brand focused on introducing consumers to global foods and promoting healing to embrace the outside world. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and hosting services. The technical infrastructure is standard for Wix sites, with moderate performance and basic mobile optimization. Security posture is basic with HTTPS enabled but lacks important security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site provides basic content and branding but lacks comprehensive security and privacy compliance measures.

Myoton AS is a specialized company providing advanced digital palpation devices (MyotonPRO) for measuring muscle tone, stiffness, and elasticity. Their products serve medical professionals, sports scientists, and researchers, positioning them as a niche leader in soft tissue assessment technology. The company has a well-established online presence with a website created on a WordPress platform, optimized for SEO and mobile use, and supported by modern analytics tools such as Google Analytics and Plausible Analytics. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements could be made by adding security headers and a cookie consent mechanism to enhance GDPR compliance. The WHOIS data confirms the domain's legitimacy with a long registration history dating back to 2004 and no privacy protection, aligning with the company's transparency. Overall, the website is professional, trustworthy, and well-suited for its target audience, with minor recommendations to improve privacy compliance and security headers.

Raumaster Oy is a Finnish company founded in 1984 specializing in advanced material handling systems primarily for the energy, pulp, and paper industries. The company positions itself as a global leader in its sector, offering a range of products and services including fuel yards, pneumatic conveying, wood handling, and related services. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at industrial B2B customers. The presence of a subsidiary, Raumaster Paper, indicates business diversification within related industrial sectors. Technically, the website uses modern analytics tools such as Google Analytics and Snoobi, hosted on the Flockler platform, and is optimized for mobile devices with good SEO practices. However, there is room for improvement in accessibility and explicit privacy compliance features.

Parim Workforce Software is a technology company specializing in shift scheduling and workforce management solutions tailored for industries with shift-based labor such as live events, security, and temporary staffing. The company offers a SaaS platform that enables businesses to automate scheduling, track time and attendance, manage payroll, and ensure compliance. With a user base exceeding 330,000 employees and presence in over 150,000 worksites globally, Parim holds a strong market position supported by positive customer testimonials and high ratings on software review platforms. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies and integrating multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, Mouseflow, and Calendly. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. From a security and compliance perspective, the site lacks a visible cookie consent mechanism which may affect GDPR compliance. WHOIS data is redacted, a common practice for privacy protection, which is justified for this business type but limits transparency. No direct contact emails or phone numbers are publicly listed, which could impact user trust and support accessibility. Overall, Parim presents as a professional and credible business with a mature digital presence. Strategic improvements in privacy compliance and security header implementation would enhance trust and regulatory adherence.

Nordic Automation Systems is a specialized technology company providing end-to-end LoRaWAN-based smart city and remote metering solutions. Their offerings include smart streetlight controllers, utility metering products for gas, water, and heat, as well as gateways and energy monitoring solutions. The company targets smart city planners, utility providers, telco operators, and system integrators, positioning itself as a niche provider with in-house R&D and production capabilities enabling rapid market rollout. The website is professionally designed, content-rich, and well-structured, supporting a positive user experience and clear navigation. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and SEO plugins, and is mobile-optimized with moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is justified for this business type. Overall, the website reflects a credible and professional business presence with room for security and privacy improvements.

Karma Ventures is a European venture capital firm specializing in investments in late seed and Series A rounds for deep-tech software startups. The firm focuses on supporting founders with funding and operational expertise, targeting early-stage European technology companies with global ambitions. The website reflects a professional and consistent brand image, emphasizing their niche investment focus and geographic market. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and ensuring secure HTTPS connections with HSTS enabled. The presence of a cookie consent banner indicates some level of privacy compliance, although explicit privacy policies and terms of service are absent. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Overall, the site presents a credible and trustworthy digital presence for a small-sized VC firm based in Estonia.

The website aktamedika.org is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents retrieval of any meaningful content or business information. The domain is registered through GoDaddy with privacy protection by Domains By Proxy, LLC, and has been active since 2007. The lack of accessible content and absence of privacy, cookie, or terms of service policies limit the ability to assess the business or security posture comprehensively. Technically, the site uses Cloudflare services for DNS and security, but DNSSEC is not enabled, representing a potential security enhancement. The security posture cannot be fully evaluated due to the blocking mechanism, but no immediate vulnerabilities are visible from the limited data. Overall, the site scores low on content quality, technical implementation, privacy compliance, and business credibility due to the lack of accessible information.

Recrur is a recruitment software company offering an applicant tracking system designed to connect HR teams, hiring managers, and candidates to simplify and automate the hiring process. The website positions itself as a SaaS platform focused on enhancing recruitment efficiency and transparency. The company appears to be a small-sized technology business founded in 2016, with hosting on DigitalOcean and a WordPress CMS platform. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Microsoft Clarity, and MailerLite for email marketing. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and functional but could improve transparency and security documentation to enhance trust and compliance.

Horizon Pulp & Paper Ltd is a well-established European manufacturer specializing in 100% virgin sack kraft paper, serving packaging applications and exporting to over 70 countries. The company has a solid market position as a leading manufacturer in its sector, with a business model focused on manufacturing and international export. The website reflects a professional corporate presence with good content quality and consistent branding, targeting industrial and business clients in need of packaging materials. Technically, the website is built on a modern WordPress platform using WooCommerce for e-commerce capabilities, Elementor for page building, and Yoast SEO for search engine optimization. The site demonstrates good mobile optimization and moderate performance, with integration of analytics tools such as Google Analytics and Plausible Analytics. Hosting appears to be managed by Elkdata OÜ, consistent with the domain registration data. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible exposed sensitive data. However, there is a lack of explicit security headers and no published security or incident response policies. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service pages represents a compliance gap. No contact information or incident response contacts were found, limiting user trust and support options. Overall, the website is functional, professional, and secure in basic terms but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security headers, and providing clear contact channels for security incidents and data protection inquiries.

The website ww38.mineprofs.org is a domain parking page indicating that the domain mineprofs.org is potentially for sale. It lacks substantive business content, contact information, or any active services. The site primarily serves as a placeholder with advertising scripts and links to domain sale services. The technical infrastructure relies on basic HTML, CSS, and JavaScript, with third-party ad networks such as Google Adsense Domains and Youseasky tracking scripts. Hosting is via Amazon Cloudfront CDN. Security posture is minimal with no visible HTTPS enforcement or security headers, and privacy compliance is weak due to absence of cookie consent mechanisms despite extensive tracking. The WHOIS data is unavailable due to a malformed request, suggesting privacy protection or restricted access, which aligns with the domain's parked status. Overall, the site presents low business credibility and trustworthiness.

Eaton Group is a financial services company specializing in advancing creditor rights and debt collection. The company emphasizes ethical business practices and transparent consumer guidance to help resolve outstanding debt obligations. Their market position is that of an established creditor rights service provider targeting creditors and consumers within the financial services sector. The website is built on WordPress using a professional theme and SEO plugin, indicating a moderate level of digital maturity. However, Google Analytics is present but not configured, and no social media presence is evident. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

PRxDigital is a well-established digital marketing and communications agency specializing in PR, branding, social media, crisis management, public affairs, advertising, and targeted networking. With a history dating back to 1975 and a domain registered since 2010, the company serves a diverse clientele primarily in the San Francisco Bay Area and Silicon Valley, focusing on technology and other sectors. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enabled and some security best practices, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the website is trustworthy and credible but would benefit from improved privacy and security disclosures.

Nordcrewing Group OÜ is a specialized maritime recruitment and crew management company operating primarily in Scandinavia and Europe. Founded in 2018, the company offers qualified seagoing personnel and maritime specialists to shipowners, shipyards, and offshore operators. Their business model leverages a proprietary Applicant Tracking and Crew Management System to optimize recruitment and crew management processes, positioning them as a trusted partner in the maritime sector. The company also provides niche services such as Ice Advisory and Deep Sea Pilotage, enhancing their market differentiation. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, multilingual support, and user interaction. The site demonstrates good mobile optimization, clear navigation, and professional design. Analytics and marketing tools such as Google Analytics and Google Tag Manager are implemented with a cookie consent mechanism, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to protect domain ownership. However, DNSSEC is not enabled, and there is no Content Security Policy or security.txt file, indicating areas for improvement. Privacy compliance is addressed with a privacy policy and cookie consent, but incident response and security policy details are absent. Overall, Nordcrewing presents a credible and professional online presence with solid business and technical foundations. Strategic enhancements in DNS security, security headers, and incident response transparency would further strengthen their security posture and trustworthiness.

Fletcher Group is a UK-based company specializing in the operation and management of Offshore Platform Supply Vessels, serving the energy sector with a modern fleet and over 300 employees. Their website demonstrates a professional digital presence with clear business descriptions, client testimonials, and multiple industry certifications, positioning them as a reputable service provider in offshore logistics and vessel management. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security measures include HTTPS, CSRF protection, reCAPTCHA integration, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The WHOIS data is notably missing, which raises concerns about domain registration legitimacy despite the professional appearance and content of the website. Overall, the site scores well in content quality and security posture but should address domain registration transparency and enhance security policy disclosures.

Nordic Honey is a small Estonian e-commerce business specializing in high-quality certified organic honey sourced from select small apiaries in Northern Europe. The company offers a range of products including natural and infused honey, gift sets, tea blends, raw chocolate, and accessories, with a focus on personalized corporate gifting and worldwide free shipping. The website is professionally designed using Squarespace CMS, featuring comprehensive privacy and cookie policies that comply with GDPR requirements. Marketing and analytics tools such as Facebook Pixel, Google Tag Manager, and Pinterest scripts are integrated to support business growth and customer engagement. Security posture is adequate with HTTPS enforced, but the absence of key security headers like HSTS and Content-Security-Policy suggests room for improvement. The lack of WHOIS data for the domain reduces transparency and slightly impacts trustworthiness, though the website content and contact information support legitimacy. Overall, Nordic Honey presents a credible and professional online presence with moderate technical maturity and good privacy compliance.

Frictape Net is a specialized company providing helideck safety solutions primarily targeting the offshore energy and transportation sectors. Established in 2005, the company positions itself as a market leader offering innovative safety products designed to optimize safety and lifetime costs. Their business model focuses on B2B sales and support, catering to clients requiring certified and reliable helideck safety equipment. The website reflects a professional and consistent brand image with good content quality and clear messaging tailored to their niche audience. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery and Slick Carousel for enhanced user experience. The site is hosted with DNS managed via Cloudflare, ensuring reliable performance and security. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. The site uses Cookiebot for comprehensive cookie consent management, indicating a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs standard security headers, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, Frictape Net demonstrates a solid digital presence with good business credibility and privacy compliance. Strategic enhancements in security documentation and DNS security could further strengthen their trustworthiness and resilience against emerging threats.

Fleep Technologies operates the website fleep.io, offering a professional messaging platform designed for companies seeking simple and effective digital communication solutions. The service integrates team chats, project communication, and email messaging into a single app, targeting small to medium-sized businesses. The company positions itself as a straightforward, subscription-based communication tool with a free trial, emphasizing ease of use and cross-organization collaboration. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts and Google Analytics integrated for typography and user tracking respectively. Hosting is managed via Amazon AWS DNS services, and the site is mobile-optimized with responsive design elements. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and there is a lack of explicit security policies or incident response information publicly available. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website presents a professional and trustworthy front with good content quality and technical implementation. The absence of direct contact emails or phone numbers on the main pages is a minor gap. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to enhance trust and security posture.

The website at https://apwiser.com/lander is a minimal landing page with very limited content and no visible business information or user engagement features. The domain is registered with GoDaddy.com, LLC since 2021, consistent with a small business age. The site loads a Google AdSense script indicating some advertising intent but lacks privacy, cookie, or terms of service policies, which are critical for compliance and user trust. Technically, the site uses JavaScript and is hosted on GoDaddy infrastructure, but lacks modern SEO and accessibility features. Security posture is basic with no DNSSEC and no visible security headers, though HTTPS is assumed. No contact information or incident response details are provided, limiting transparency and trust. Overall, the site appears to be a placeholder or underdeveloped landing page with low content quality and business credibility.

Solis BioDyne OÜ is an established Estonian company specializing in the development and production of molecular biology reagents, particularly PCR, qPCR, and RT-qPCR products. Founded in 1995, it has grown into a leading reagent supplier in Europe with a global customer base including research institutes and biotech companies. The company offers a broad product portfolio and additional services such as contract manufacturing and assay development. The website reflects a professional and comprehensive digital presence with clear product information, customer testimonials, and certifications that reinforce its market position. Technically, the site uses modern web technologies including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security posture is good with HTTPS, cookie consent, and no visible vulnerabilities, although DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

NJ Production is a well-established, award-winning event and communication agency specializing in creating powerful event experiences globally. The company offers a broad range of services including project management, venue logistics, event communication, content support, technical production, and sustainability consulting. Their market position is strong, supported by a professional portfolio and consistent branding. The website reflects a mature digital presence with multilingual support and integrated marketing tools. Technically, the site is built on WordPress with modern analytics and marketing integrations, hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS, reCaptcha, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie policies and GDPR consent. Overall, the site demonstrates high professionalism and trustworthiness, suitable for corporate clients seeking event services.

Marketing Sharks is an established Estonian digital marketing and digitalization service provider founded in 2012. The company offers a broad range of services including digital marketing, SEO, custom and ready-made website and e-commerce solutions, branding, and WordPress development. Their market position is supported by a consistent brand presence, client logos, and active social media channels. Technically, the website is built on WordPress with modern plugins and tracking tools such as Google Analytics and Facebook Pixel, and uses Cloudflare DNS services. Security posture is good with HTTPS enforced, reCAPTCHA on forms, and Wordfence security plugin indications, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

Fed Africa is a recruitment consultancy specializing in senior and middle management placements across Africa and the Middle East, operating from offices in Paris and Abidjan. The company targets expatriates, diasporas, and local professionals seeking executive roles, as well as companies looking to recruit top talent. The website reflects a professional and consistent brand presence with clear navigation and sector-specific job listings. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Analytics, Pardot, and Criteo. The site is mobile-optimized and uses HTTPS with CSRF protections on forms, indicating a good security baseline. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence mitigates some risk. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced transparency on security policies and domain registration.

Superangel OU operates as an early stage venture capital fund and company builder focused on technology startups in the Baltics and Nordics. The company targets tech founders raising pre-seed or seed rounds, offering investment tickets typically between €300k and €1M. Their business model centers on leveraging entrepreneurial experience and networks to support scalable tech ventures in AI, robotics, logistics, fintech, and SaaS sectors. The website presents a professional and consistent brand image with clear messaging and portfolio highlights, positioning Superangel as a niche regional VC player with a strong founder-centric approach. Technically, the website is built on WordPress with modern SEO practices including Yoast SEO and structured data (JSON-LD). It uses common web technologies such as jQuery, GSAP for animations, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. No hosting provider is explicitly identified, and DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited, which protects against unauthorized domain transfers. However, security headers are not detected, and there is no visible cookie consent mechanism or published security/incident response policies. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is consistent with the business claims, showing a domain registered in Estonia since 2017 under the company name Superangel OU, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and content quality. Privacy compliance could be improved by adding cookie consent and more explicit GDPR-related disclosures. Security posture would benefit from enhanced HTTP headers and published policies. The risk level is low, with no critical issues detected, making the site trustworthy for its intended audience.

Audi Eesti operates as the official online presence for Audi's premium vehicle offerings in Estonia, providing detailed information on new and used cars, accessories, and dealer locations. The website reflects a strong market position as a national distributor for Audi, targeting Estonian consumers interested in premium automobiles. The technical infrastructure leverages modern web technologies including Adobe Experience Manager Headless CMS, Google Tag Manager, and Facebook Pixel, ensuring a robust digital experience with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit privacy policies and incident response contacts are absent, representing areas for improvement. Overall, the site is professional and trustworthy, but enhancing privacy compliance and transparency would further strengthen user confidence.

Tilde.ai is a technology company specializing in AI-driven language technologies, including neural machine translation, speech-to-text, text-to-speech, and conversational AI solutions. Positioned as a European leader, the company offers a broad portfolio of language and speech technology services targeting businesses and organizations seeking multilingual and AI-powered communication tools. The website is professionally designed, multilingual, and uses modern web technologies such as WordPress, Elementor, and various analytics and marketing tools. The technical infrastructure appears robust with hosting likely on Microsoft Azure and integration of multiple tracking and marketing services. Security posture is generally good with HTTPS enabled and domain registration protections, though improvements such as enabling DNSSEC and publishing explicit security and privacy policies are recommended. Overall, the site is accessible without WAF or blocking mechanisms, indicating good operational maturity.

Progmatic industriële automatisering is a well-established Dutch company specializing in industrial automation solutions and services. With over 40 years of expertise, they offer a broad portfolio including software development, artificial intelligence, IPS automation, pre-engineering, energy saving, panel building, and maintenance. Their market reach spans multiple industrial sectors such as food and beverage, mining, recycling, marine, and sustainable energy. The company positions itself as a trusted partner with a strong focus on quality, customer service, and innovation. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools, hosted by Xynta Hosting B.V. The site is well-optimized for SEO and mobile devices, with comprehensive structured data enhancing search visibility. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and explicit policies could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a professional, credible business with a strong digital presence.

Wageningen University & Research is a prominent educational and research institution based in the Netherlands, specializing in life sciences, food production, environment, and health. The website serves as a comprehensive portal for academic programs including bachelor, master, and professional courses, targeting students, researchers, and professionals in related fields. The institution holds a strong market position as a leading global university in its sector. Technically, the website employs a modern technology stack including GX WebManager CMS, JavaScript libraries such as jQuery, and integrates advanced analytics and marketing tools like Google Tag Manager, Google Analytics, and Visual Website Optimizer. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements several best practices such as opening external links in new tabs and asynchronous script loading. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and explicit security governance disclosures to improve user trust and regulatory adherence.

The European Hematology Association (EHA) operates a professional website focused on advancing hematology knowledge, collaboration, and education within the European healthcare community. The organization is well-established, with a domain registered since 2000, and positions itself as a leading force in hematology. The website targets healthcare professionals, researchers, and clinicians interested in hematology, offering services such as knowledge sharing and community engagement. The business model is non-profit and educational in nature. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO tools such as Yoast. It employs Cookiebot for GDPR-compliant cookie consent management and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good accessibility and SEO practices, although performance is moderate. Hosting is provided by Hosting Concepts B.V., and the domain registration details are consistent with the organization's identity. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent with granular user controls. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data is transparent and consistent, supporting the site's legitimacy. Overall, the website presents a professional and trustworthy digital presence with strong privacy compliance and a solid security posture. Strategic improvements include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security framework.

Mobi Lab OU is an established Estonian technology company specializing in designing and building mobile and augmented reality products. Founded in 2001, the company serves a diverse clientele including renowned tech businesses such as Microsoft, Skype, Ericsson, and Bolt. Their service offerings encompass business design, product management, digital product design, software engineering, and CTO as a Service, targeting SMEs, creative agencies, and product companies. The company positions itself as a trusted partner for innovative digital solutions with a strong market presence in the technology sector. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, Hotjar, and Cloudflare DNS services. The site is well-optimized for performance, mobile responsiveness, and SEO, with a fast loading experience and good accessibility features. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and a cookie consent mechanism, although some security headers and DNSSEC are not implemented. From a security perspective, the website demonstrates a good posture with no critical vulnerabilities detected. However, it lacks a published privacy policy, terms of service, and explicit security or incident response policies, which are important for GDPR compliance and user trust. The domain registration data is consistent and trustworthy, with a long domain age and registrant details matching the website's business claims. Overall, Mobi Lab's website reflects a professional and credible business with strong technical infrastructure and moderate privacy compliance. Strategic improvements in privacy documentation, security headers, and DNS security would enhance their security posture and compliance standing.

Random Forest is a small Estonian IT consultancy and AI development agency founded in 2019, specializing in providing CTO-for-hire services, software development from UI/UX design to scalable backend systems, and AI/ML solutions. Their market position is that of a niche technology partner focused on solving real-life business problems with optimal technology stacks including React, Flutter, Node.js, and Python. The company emphasizes deep business understanding and scalable solutions. Technically, the website is built on Webflow, uses modern fonts and libraries, and is hosted with Cloudflare DNS and Webflow hosting. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided with multiple channels and social media presence. Overall, the website is professional and trustworthy but can improve privacy and security transparency.

The Estonian Entrepreneurship University of Applied Sciences (EUAS) is a prominent private higher education institution in Estonia, specializing in entrepreneurship and applied sciences. It serves a diverse international student body and is strategically located in Ülemiste City, a major business hub. The university offers a range of academic programs including bachelor’s, master’s, open university courses, and micro-credentials, supported by national accreditation and partnerships with reputable organizations. The website reflects a professional and user-friendly digital presence with multilingual support and clear navigation.

The website www.harbour.lv is a small business site hosted on the Wix platform, targeting a Latvian audience. The site uses standard Wix technologies and integrates Google Analytics for visitor tracking. However, the site lacks comprehensive business information, privacy policies, and contact details, which limits its credibility and user trust. Technically, the site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. Overall, the site presents a minimal digital footprint with room for significant improvements in privacy compliance, security, and business transparency.

EveryPay operates as a payment gateway service provider offering a merchant portal and risk management tools to facilitate real-time transaction tracking, refunds, and fraud prevention. The website targets merchants and e-commerce businesses primarily in Estonia and the Baltic region, supporting multiple languages including English, Estonian, Latvian, and Lithuanian. The company positions itself as a reliable regional payment service provider with a focus on merchant support and integration ease. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It uses Uikit for styling and includes Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with nonce tokens. However, it lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data for the subdomain is unavailable, which is typical and not suspicious. Contact information is clearly provided, enhancing trust. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in privacy compliance and security headers would enhance trust and compliance. The site is suitable for its target audience but could benefit from enhanced transparency and security best practices.

Harju Elekter is a well-established Estonian company specializing in electrical distribution solutions with over 55 years of experience. The company serves the energy sector and related industries, offering products such as prefabricated substations and electrical infrastructure services. The website reflects a mature business with a strong market presence, including public stock exchange listing and sustainability recognitions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and security tools such as Google Analytics and reCAPTCHA. The security posture is solid with HTTPS enforced and cookie consent implemented, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and business operations.

Edurus AB operates a professional website focused on providing personalized gravestone design services in Sweden. The company positions itself as a family-owned business offering a simple three-step process to design custom gravestones, targeting individuals seeking memorial solutions. The website demonstrates a moderate level of digital maturity, utilizing WordPress CMS, Gravity Forms for data collection, and integrating marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Bing Ads. Cookie consent is implemented via Cookiebot, indicating awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks explicit security headers and visible incident response contacts. The absence of WHOIS data for the domain www.edurus.se raises concerns about domain registration legitimacy, although the website content and branding appear consistent and professional. Overall, the site scores moderately on content quality, technical implementation, security, privacy compliance, and business credibility.

The survease.io domain currently serves only a 404 Not Found error page with no accessible website content. This prevents any meaningful analysis of the company's business operations, services, or compliance posture. The domain is registered through a privacy protection service based in Iceland and hosted with Cloudflare DNS, indicating some level of infrastructure maturity but no direct evidence of active business presence. The lack of privacy policies, contact information, or security disclosures suggests the website is either inactive or under development. From a security perspective, the site uses HTTPS but lacks security headers and DNSSEC, which are recommended for improved protection. Overall, the site presents a low trust profile due to missing content and transparency.

HugeDomains operates a professional domain marketplace specializing in premium domain sales with flexible payment plans. The website is well-structured, providing clear pricing, purchase options, and customer support channels. The technical infrastructure includes modern JavaScript libraries, Google Analytics for tracking, and Google reCAPTCHA Enterprise for bot mitigation, indicating a mature digital presence. Security posture is strong with HTTPS enforced and SSL encryption, though additional security headers and explicit security policies are absent. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data for the domain www.hugedomains.com suggests privacy protection or unregistered status, which is typical for domain marketplaces. Overall, the site presents a trustworthy and professional front for domain sales.

OpenNode LLC is a small technology company specializing in open-source infrastructure management software and cloud system implementations. Their product portfolio includes Waldur, an open-source multi-cloud marketplace; Kubernetes ON, a managed Kubernetes service; and the G-Cloud Platform, targeting government cloud solutions. The company targets enterprises and public sector organizations seeking cloud infrastructure management and governance solutions. The website is professionally designed, consistent in branding, and provides clear information about products and services, though it lacks comprehensive privacy and security policy disclosures. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Leaflet.js for mapping, and Google Analytics for user tracking. Hosting appears to be on AWS infrastructure, inferred from DNS nameservers. The site is mobile-optimized with good navigation and user experience, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and published security policies such as privacy, cookie, incident response, or vulnerability disclosure statements. DNSSEC is not enabled, which is a recommended improvement. The WHOIS data shows a consistent and legitimate domain registration dating back to 2010, supporting the company's credibility. Overall, the website presents a moderate security posture and good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

DELUNA4D operates as an online Toto Macau 4D lottery betting platform targeting Indonesian players who prefer low minimum bets. The website is built on Squarespace, leveraging its CMS and hosting infrastructure, with proper HTTPS and HSTS security configurations. However, the site lacks critical privacy and security disclosures, including privacy policies, cookie consent mechanisms, and incident response contacts, which limits its compliance posture and trustworthiness. The domain registration is stable and consistent with the business age, but the absence of registrant details and minimal contact information reduces transparency. Overall, the platform appears functional but requires significant improvements in privacy, security, and business credibility to enhance user trust and regulatory compliance.

eAgronom is a technology company focused on enabling businesses to achieve sustainability goals while supporting farmers through improved revenue generation, soil quality, and financing access. The website presents a modern, well-designed interface built with Framer and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The site lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is weak due to missing security headers and unclear SSL configuration. Overall, the website is functional and professional in design but requires improvements in security, compliance, and transparency to enhance trust and legitimacy.