Real Estate security reports

B

BHD studio – Architecture and design

bhd.rs

43

BHD studio is a Serbian-based creative design studio specializing in interior and exterior design as well as 360° virtual and VR tours for commercial and private spaces. The company targets clients seeking high-quality, functional, and visually appealing space designs, leveraging modern visualization technologies to enhance presentation and marketing. Their market position is that of a specialized boutique studio with a focus on immersive virtual experiences. Technically, the website is built on WordPress with Elementor, employing modern web technologies and image optimization for moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Contact information is clearly presented, supporting business credibility. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening.

HOME RENTAL is a Lithuanian website providing detailed information about short-term housing rentals and home exchanges. It targets landlords and tenants interested in flexible rental options, emphasizing legal considerations, risks, and benefits. The site positions itself as an informational resource within the Lithuanian real estate niche, offering guidance rather than direct rental services. Technically, the website is built on WordPress using the Astra theme and Yoast SEO plugin, indicating a modern CMS infrastructure with SEO optimization. The site is mobile-friendly and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks important security headers and visible privacy or cookie policies, which are critical for compliance and trust. No contact or incident response information is provided, limiting transparency. WHOIS data is unavailable due to query limits, which restricts domain trust analysis. Overall, the site is functional and informative but would benefit from enhanced privacy compliance, security hardening, and clearer business contact details.

UAB "VIKOSTA" is a Lithuanian company specializing in industrial climbing services, building renovation, facade insulation, roofing, waterproofing, and underwater ship and dock maintenance. The company targets property owners and building managers requiring specialized high-altitude and renovation services. Their website presents a professional image with detailed service descriptions and certifications, positioning them as a credible local service provider. Technically, the website uses legacy jQuery and Bootstrap frameworks with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present, indicating compliance gaps. No WHOIS data was available to verify domain registration details, which limits trust in domain legitimacy. Overall, the company appears legitimate and operational, but the website requires security and privacy improvements to enhance trust and compliance.

U

UAB Mikrovisata

mikrovisata.lt

44

UAB Mikrovisata is a Lithuanian business group with over 25 years of experience specializing in real estate development and telecommunication system design and installation. The company operates through subsidiaries such as mvvalda.lt and mvservisas.lt, focusing respectively on real estate projects and electrical/telecommunication services. The website reflects a medium-sized enterprise with a consistent brand presence and clear contact information, targeting clients interested in these sectors within Lithuania. Technically, the website is built on WordPress 4.8.1 and uses several common plugins and libraries, including Google Analytics and Google Maps API. However, the use of outdated jQuery and lack of modern security headers indicate areas for improvement. Security posture is moderate with HTTPS enabled but missing advanced security practices and policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website is functional and professional but requires updates to improve security and compliance.

H

HML Project Management

hml.ee

34

HML Project Management is a specialized service provider in the real estate and construction sector, offering expert project management, cost management, design management, and related consulting services. The company targets organizations investing in, developing, building, or operating property assets, with a market presence primarily in Estonia and several other European countries. The website reflects a professional and consistent brand image with multilingual support and client trust indicators such as logos and project references. Technically, the website is built on WordPress using modern plugins like Elementor, Yoast SEO, and Slider Revolution. It employs Google Analytics via Google Tag Manager for tracking and is hosted by Radicenter OÜ, an Estonian registrar and hosting provider. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

Rebaltic is a Lithuanian real estate brokerage specializing in premium residential properties primarily in Vilnius and select other locations such as Palanga. The company positions itself as a market leader in the premium housing segment with over 12 years of experience and a large portfolio of exclusive properties. Their website offers detailed listings for sales and rentals, broker information, and contact details, targeting affluent clients seeking high-end real estate. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, FontAwesome for icons, and responsive design elements, providing a good user experience with clear navigation and mobile optimization. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. Privacy compliance is addressed with a privacy policy and cookie consent banner, indicating GDPR awareness. However, WHOIS data is unavailable due to query limits, limiting domain registration transparency. Overall, the site is professional and trustworthy but could improve security headers and incident response disclosures.

U

UAB Vesta Consulting

vestaconsulting.lt

59

UAB Vesta Consulting is a Lithuanian-based consulting company specializing in sustainability solutions for organizational management and real estate. Their services include sustainability strategy development, ESG and CSRD reporting, real estate certification (BREEAM, LEED, WELL, FITWEL, EDGE, LPTVS), energy efficiency consulting, and sustainability training. The company positions itself as a professional team with over 10 years of experience in the Baltic region, targeting organizations and businesses seeking to improve their sustainability performance and real estate value. Technically, the website is built on WordPress using the Elementor page builder, enhanced with Yoast SEO for optimization and WPML for multilingual support. It integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Google Tag Manager. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and employs reCAPTCHA on forms to prevent spam. However, it lacks several recommended security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a professional and trustworthy front for the business, though the absence of WHOIS data limits full domain trust verification. Strategic improvements in privacy policy visibility, security headers, and incident response transparency would enhance compliance and security posture.

M

Mano Būstas

manobustas.lt

73

Mano Būstas is a Lithuanian company specializing in comprehensive multi-apartment building maintenance services. The website presents the company as a professional service provider focused on smart solutions, property value growth, and clean environments. The target audience includes apartment owners and property managers in Lithuania. The business model centers on providing maintenance, management, and cleaning services to residential buildings. Technically, the website is built on WordPress with Bootstrap framework, integrating modern analytics and chat support tools such as Google Analytics, Google Tag Manager, and Chatwoot. The site is mobile-optimized and SEO-friendly, with proper metadata and structured data enhancing search visibility. Security-wise, the site enforces HTTPS, includes key security headers, and implements cookie consent mechanisms compliant with GDPR. However, no explicit security policy or incident response information is published, and WHOIS data is unavailable due to query limits, which slightly reduces transparency. Overall, the website is professional and trustworthy, with moderate technical maturity and good privacy compliance.

A

Aketuri architektai

aketuriarchitektai.lt

45

Aketuri architektai is a Lithuanian architecture firm presenting a comprehensive portfolio of architectural projects including residential, commercial, and mixed-use developments. The website serves primarily as a portfolio showcase targeting clients and developers interested in architectural services. The firm appears to be a small-sized entity focused on the real estate sector. Technically, the website is built on WordPress using Elementor and common frontend libraries such as jQuery and Bootstrap. The site is mobile optimized and has moderate performance but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, which are important for compliance and trust. No WHOIS data was available to verify domain registration details, but the site shows no signs of malicious activity or blocking mechanisms.

G

Gouvêa Advogados

gouveadvogados.com.br

59

Gouvêa Advogados is a specialized law firm based in São Paulo, Brazil, with a history dating back to 1960. The firm focuses on legal advisory and litigation services related to expropriation, compensation for loss of commercial goodwill, and adverse possession claims. Their market position is that of a well-established boutique firm leveraging decades of expertise combined with modern tools and systems to serve clients effectively. The website reflects a professional and consistent brand image targeting clients requiring specialized legal services in real estate and commercial law. Technically, the website is built on WordPress using the Avada theme and several modern plugins, including Yoast SEO and GDPR compliance tools. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site is mobile-optimized and includes Google Analytics for user tracking with GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and no explicit security or incident response policies are published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Evolvo ltd.

apus.lt

51

APUS TURTAS operates as a Lithuanian real estate service provider offering property sales, rentals, valuation, and financing assistance. The company targets local buyers and renters, positioning itself as an established player in the Lithuanian real estate market. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the site uses a combination of Bootstrap, jQuery, and various JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with cookie consent mechanisms and no visible sensitive data exposure, but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is basic but includes GDPR-related cookie policies and consent banners. Business credibility is supported by clear contact details, partner logos, and social media presence. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance transparency.

K

KGC Group

kgc.lt

48

KGC Group is a well-established company specializing in bespoke building envelopes and facade solutions, serving architects, construction firms, and real estate developers primarily in Europe. With over 17 years of experience and a large international team, they offer comprehensive services from design and engineering to production, installation, and maintenance. Their market position is strong as a leading facade manufacturer in Europe, emphasizing sustainability and innovation. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multilingual support via WPML. The infrastructure is hosted likely via GoDaddy, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and credible but would benefit from enhanced privacy and security practices.

N

Newsec

bptre.com

56

Newsec is a well-established real estate services company operating in the Baltic region, offering consulting, property management, and investment services. The website reflects a professional and consistent brand presence with a focus on real estate clients and investors. The business model centers on providing comprehensive real estate solutions, positioning Newsec as a key player in the Baltic real estate market since 2004. Technically, the website is built on WordPress with modern plugins such as WPBakery, Cookiebot for consent management, and Google Analytics for traffic analysis. The hosting infrastructure leverages Amazon AWS DNS services, indicating a reliable hosting environment. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing additional security headers and explicit security policies. Privacy compliance is well addressed through Cookiebot, ensuring GDPR adherence and transparent cookie disclosures. Overall, the website is accessible, well-structured, and professionally maintained, supporting Newsec's business credibility and trustworthiness.

H

HomeToGo GmbH

hometogo.com

68

HomeToGo GmbH operates a large-scale vacation rental search engine offering millions of listings worldwide. The platform targets travelers seeking diverse vacation rental options such as cabins, condos, and villas, positioning itself as one of the largest in the market. The website is professionally designed with extensive content and international targeting, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, lazy loading, and Google Maps integration, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration transparency, though the website's quality and structured data suggest legitimacy. Overall, the site presents a solid business platform with room to enhance privacy compliance and security transparency.

S

Sweco

sweco.lt

48

Sweco Lithuania is a leading European engineering and architecture company specializing in sustainable urban development, infrastructure, and environmental consulting. As part of the Sweco AB group, it leverages a large team of over 22,000 professionals to deliver comprehensive services including building design, energy, water management, transport infrastructure, and sustainability consulting. The company positions itself as a market leader with a strong commitment to transforming society through innovative and sustainable solutions. Technically, the website is built on WordPress with modern JavaScript libraries and integrates advanced features such as video embedding, consent management, and search functionality. The site demonstrates good performance, mobile optimization, and accessibility standards, reflecting a mature digital presence. The use of Google Tag Manager and Complianz GDPR tools indicates a focus on privacy and analytics compliance. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration verification, but the overall brand consistency and business information strongly support legitimacy. Overall, Sweco Lithuania presents a professional, trustworthy, and compliant online presence aligned with its enterprise status and market position. Strategic improvements in security policy transparency and header implementation would further enhance its security posture.

F

Futura Casa Agency

futura.casa

51

Futura Casa Agency is a specialized B2B agency representing leading Italian, Spanish, and Indian interior design brands across Eastern Europe, Caucasus, and Central Asia. The company focuses on collaborating with dealers, architects, and designers to deliver high-end interior design solutions. The website reflects a professional and consistent brand image, targeting a niche market with clear business objectives. Technically, the site is built on WordPress with Bootstrap and uses modern libraries such as jQuery and FontAwesome, ensuring a responsive and user-friendly experience. Cookie consent and privacy compliance are managed effectively through Cookiebot, demonstrating a commitment to GDPR compliance. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Overall, the website is trustworthy and well-maintained, with room for improvement in explicit security policies and contact information transparency.

P

Perthshire Solicitors Property Centre

pspc.co.uk

58

Perthshire Solicitors Property Centre (PSPC) is a well-established real estate business specializing in property sales and solicitor property services in the Perthshire region of the United Kingdom. Founded in 1997, PSPC positions itself as a market leader offering comprehensive property listings, home reports, marketing packages, and search tools tailored to buyers and sellers in the local area. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting property market participants in Perthshire. Technically, the website employs a mature technology stack including jQuery, FontAwesome, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized and incorporates cookie consent mechanisms, though accessibility features are basic. Hosting is provided by Hostworld Internet, with no CMS explicitly detected. Performance is moderate, with room for improvement in modern frameworks and accessibility compliance. From a security perspective, the site benefits from HTTPS encryption and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of a security.txt file or vulnerability disclosure policy suggests an opportunity to enhance transparency and security posture. Overall, the security maturity is good but could be improved with additional best practices. The domain is long-standing, registered since 1997, and WHOIS data is consistent with the business claims, supporting legitimacy. Contact information is clearly provided, including phone and email, alongside active social media channels. The site integrates third-party marketing and tracking tools, balanced with user consent mechanisms. The overall risk is low, with recommendations focusing on enhancing security headers, incident response visibility, and accessibility compliance to strengthen trust and resilience.

Baltic Sotheby's Internation Realty operates as a luxury real estate hub focusing on the Baltic region, specifically targeting the Lithuanian and Estonian markets. The website serves primarily as a landing page directing visitors to regional market sites. The business model centers on real estate brokerage and market access for high-end properties. The site branding is consistent with the Sotheby's name, but the content is minimal and lacks detailed business or contact information. Technically, the website uses standard HTML5 and CSS3 with Google Fonts integration. It is mobile responsive with appropriate viewport settings and responsive images. However, there is no evidence of advanced frameworks, CMS, or analytics tools. Performance is moderate, and SEO is basic with minimal meta tags. From a security perspective, the site lacks visible HTTPS confirmation, security headers, privacy policies, or incident response contacts. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. The absence of privacy and cookie policies indicates poor compliance with GDPR and related regulations. Overall, the website presents a basic digital presence with moderate business credibility but significant gaps in security and privacy compliance. Strategic improvements are recommended to enhance trust, security posture, and regulatory adherence.

U

UAB LATAVA

latava.lt

46

UAB LATAVA operates as a Lithuanian real estate agency specializing in brokerage services for selling and renting various property types including apartments, houses, and land plots. The company targets individuals and businesses within Lithuania, particularly in Kaunas and Vilnius. Their website offers property listings, valuation services, and consultation to facilitate real estate transactions. The business model is focused on commission-based brokerage and advisory services within the local real estate market. Technically, the website employs a traditional jQuery-based stack with plugins such as Chosen for enhanced select inputs and Lightbox for image display. It integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is served over HTTPS, indicating a secure transport layer, but lacks advanced security headers and cookie consent mechanisms. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site demonstrates fundamental protections such as HTTPS and no visible exposure of sensitive data. However, the absence of security headers, cookie consent, and incident response information suggests room for improvement in compliance and security posture. The lack of WHOIS data due to query limits reduces confidence in domain registration transparency, though the website content and contact information appear legitimate and consistent. Overall, the website is functional and professional with a moderate risk profile. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and reduce potential vulnerabilities.

A

AIAI architects

aiaiarchitects.lt

62

AIAI architects is a small Lithuanian architecture and interior design firm specializing in creative interior solutions for offices, clinics, stores, cafes, restaurants, and residential homes. The company targets businesses and individuals primarily in Vilnius, Lithuania, offering tailored interior design services to enhance business success and lifestyle. The website is built on Hostinger's platform using modern technologies such as the Astro framework and Google Analytics for visitor tracking. The site is well-designed, mobile-optimized, and provides clear navigation and contact information, including email and phone. However, it lacks essential privacy and cookie policies, which poses compliance risks. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but it lacks security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate despite unavailable WHOIS data due to query limits, and the business presents a professional online presence.

H

HELIOS GROUP

helios.lt

45

Helios Group is a Lithuanian real estate company specializing in the development, management, leasing, and sale of commercial, administrative, and residential properties primarily in Vilnius, Kaunas, and Klaipėda. The company presents itself as a medium-sized regional player with a focus on high-quality real estate projects. The website is professionally designed using WordPress and incorporates modern SEO and analytics tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure forms, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to query limits reduces transparency but the website content and contact information support legitimacy. Overall, the site is functional and trustworthy with room to enhance privacy compliance and security best practices.

C

Creston

creston.lt

46

Creston is a Lithuanian real estate company specializing in property brokerage and related services. The website targets local buyers, sellers, and investors, offering services such as property sales, purchase assistance, and career opportunities in real estate. The company maintains a professional online presence with consistent branding and relevant content tailored to its market segment. Technically, the website is built on WordPress using Bootstrap and integrates common analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is secured with HTTPS and employs Google reCAPTCHA to protect forms from abuse. However, there is a lack of explicit privacy and cookie policies, and no visible security headers, which are areas for improvement. The WHOIS data is unavailable due to query limits, but no suspicious indicators are present in the website content, suggesting legitimacy. Overall, the site demonstrates a moderate to good level of digital maturity and security posture.

O

Ober Haus

ober-haus.com

47

Ober Haus is a regional real estate services company operating primarily in the Baltic states of Lithuania, Latvia, and Estonia. The company offers a broad range of services including property and business valuation, residential and commercial real estate brokerage, market research, and property management. Their market position is that of an established and professional real estate service provider with localized presence in key Baltic cities. Technically, the website is built on WordPress with a modern plugin stack including Yoast SEO, WPML for multilingual support, and Contact Form 7 with Google reCAPTCHA for secure user interactions. The site is well-structured, mobile-optimized, and includes privacy and cookie policies with consent mechanisms, indicating a good level of digital maturity and privacy compliance. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS registration data is a notable concern for domain legitimacy, but the professional content and contact information mitigate some risk. Overall, the website presents a trustworthy and professional front for Ober Haus's real estate business.

S

Sirin

sirin.eu

59

Sirin is a prominent real estate developer specializing in sustainable logistics parks in the Baltic region, positioning itself as one of the largest players in this niche market. The company emphasizes energy efficiency and sustainability, having developed over 600,000 square meters of modern logistics real estate. The website reflects a professional digital presence built on WordPress, incorporating modern SEO and marketing tools such as Yoast SEO, Google Tag Manager, and Omnisend. Cookie consent is managed through Cookiebot, indicating attention to privacy compliance, although explicit privacy and terms of service documents are not readily found. Security posture is strong with HTTPS enabled and no evident vulnerabilities, but the absence of security headers and incident response contacts suggests room for improvement. Overall, the website is well-designed, mobile-optimized, and provides a good user experience, supporting the company's credibility and market position.

G

Galio group

galio.lt

59

Galio group is a real estate development company focused on delivering new apartments and office spaces primarily in Vilnius, Lithuania, and also operating in Latvia. The company positions itself as a leading developer of business centers in the Baltic region, emphasizing quality, sustainability, and innovative living and working spaces. Their website reflects a mature digital presence with comprehensive project information, news updates, and a strong emphasis on sustainability certifications such as BREEAM. Technically, the site is built on WordPress with modern tracking and analytics tools including Google Analytics, Facebook Pixel, Hotjar, and Adform, indicating a data-driven approach to user engagement and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification but the professional presentation and detailed content suggest a legitimate and established business. Overall, the website is well-optimized for SEO, mobile-friendly, and provides clear contact information, supporting a positive user experience and business credibility.

C

Conresta

conresta.lt

58

Conresta operates as a professional general contracting and construction company based in Lithuania, offering innovative and sustainable building solutions across public and private sectors. The company has a strong market position supported by multiple ISO certifications and industry awards, reflecting a commitment to quality and environmental standards. Their website is built on WordPress, leveraging modern JavaScript libraries and SEO best practices, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data limits full domain legitimacy verification, but the professional presentation and content quality suggest a credible business. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and incident response policies, and providing clear contact information for security and compliance inquiries.

V

VillaCarte

villacarte.com

64

VillaCarte is a premier property services firm specializing in resort sales and rentals in Thailand, particularly in Phuket and Koh Samui. With over 12 years in the market, the company offers a comprehensive range of services including property sales, rentals, concierge services, and property management. Their business model targets property buyers, renters, and investors seeking luxury real estate and related services in popular Thai resort locations. The website reflects a medium-sized enterprise with consistent branding and a good level of content quality.

B

Baltic RED

balticred.com

43

Baltic RED is a large commercial real estate development and management company operating primarily in the Baltic states, with a focus on Lithuania. The company offers key services including real estate development, property management, and consulting. The website presents a professional image with consistent branding and partnerships with well-known retail brands, indicating a strong market position. Technically, the website is built on WordPress 5.6.14 and uses several older JavaScript libraries such as jQuery 1.8.0 and Fancybox 1.3.4, which may pose security risks. The site is moderately optimized for performance and SEO but lacks modern accessibility and mobile optimization features. Security posture is moderate with HTTPS usage but lacks important security headers and uses insecure form submission for partner login. Privacy compliance is weak, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. The absence of WHOIS registration data for the domain is a significant concern, reducing trustworthiness and raising questions about domain legitimacy. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and domain registration transparency.

C

Corporate Rentals

corporaterentals.com

47

Corporate Rentals is a well-established furniture rental company in the USA, founded in 2000, offering high-quality home and office furniture rental services including rent-to-own options. The company targets residential and corporate customers seeking flexible furniture solutions with delivery and setup services. Their market position is strong with a large inventory and positive customer feedback. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern technologies and optimized for mobile. Security posture is good with HTTPS and security headers, though lacking explicit security policies and cookie consent mechanisms. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security transparency.

C

City Projects

cityprojects.lt

39

City Projects is a Lithuanian professional architectural and engineering project management company specializing in various types of building design services. The company emphasizes competence and experience, leveraging BIM principles and experienced project managers and engineers. Their portfolio includes over 200 completed projects and more than 100 clients, indicating a stable market presence in the real estate sector. The website is well-structured, professionally designed, and multilingual, targeting clients seeking comprehensive project design and management solutions. Technically, the website is built on WordPress using popular plugins such as Elementor, LayerSlider, and Contact Form 7. It employs HTTPS and integrates Google Analytics for visitor tracking. The site shows good mobile optimization and SEO practices, although some security headers are missing. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. From a security perspective, the site uses HTTPS and reCAPTCHA but lacks visible advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, City Projects presents a credible and professional online presence suitable for its business domain. Enhancements in security headers, incident response visibility, and WHOIS transparency would further strengthen trust and compliance.

C

Citus

cc.lt

38

Citus is a Lithuanian real estate development company specializing in unique housing projects and flexible business solutions. The company positions itself as an innovative and quality-focused developer with award-winning projects, targeting investors, families, and independent buyers in Lithuania. Their business model emphasizes online property reservation and customer engagement through interactive website features. Technically, the website employs modern JavaScript libraries and tracking tools such as Facebook Pixel and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are lacking. Overall, the website reflects a professional and trustworthy real estate business with room for improvement in privacy compliance and security best practices.

E

EIKA Group

eika.lt

52

EIKA Group is a well-established real estate development company based in Lithuania, founded in 2009. The company positions itself as a partner in urban prosperity, offering services primarily in real estate development, property management, and sustainability initiatives. Their website reflects a mature digital presence with good SEO practices, structured data, and integration of modern marketing and analytics tools such as Google Tag Manager and Hotjar. The site is built on WordPress and employs cookie consent mechanisms compliant with GDPR, indicating a commitment to privacy and regulatory adherence. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. No direct contact information or incident response policies are publicly visible, which could be enhanced to improve trust and transparency. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's market position as a leading real estate group in Lithuania.

C

Conmaster

conmaster.lt

38

Conmaster is a Lithuanian company specializing in consulting, engineering, legal, and construction project management services, targeting clients involved in large and complex investment construction projects globally. The website presents a professional image with multilingual support and a focus on client success through qualified expertise. Technically, the site is built on WordPress with common plugins and enforces HTTPS, but lacks advanced security headers and detailed WHOIS transparency. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. However, the absence of explicit contact emails and phone numbers, combined with missing WHOIS data, reduces overall trustworthiness. Strategic improvements in security headers, domain registration transparency, and contact information visibility are recommended to enhance credibility and security posture.

N

Northern Horizon

nh-cap.com

57

Northern Horizon is a real estate asset management company specializing in healthcare and specialized real estate investments in Northern Europe. The company targets institutional investors by managing real estate funds and separate accounts. The website presents a professional image with clear business focus and consistent branding. Technically, the site is built on WordPress using common plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The presence of Google Analytics and Tag Manager indicates moderate user tracking and marketing efforts. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, which should be further investigated. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.

Roger Wolff Architect is a small architectural practice with a website currently under construction. The business appears to focus on architectural design services, likely targeting local clients interested in residential or small-scale projects. The website content is minimal, with only basic contact information provided and no detailed business descriptions or service listings. The domain is well-established, registered since 2005, indicating a potentially stable business presence despite the minimal online footprint. Technically, the website uses basic JavaScript and CSS but lacks modern frameworks or CMS platforms. The site is served over HTTP without HTTPS, which is a significant security concern. There are no security headers or privacy-related policies implemented, and no analytics or tracking tools are detected. The website design and user experience are poor, with no mobile optimization or accessibility features evident. From a security perspective, the absence of HTTPS and security headers exposes visitors to risks such as data interception. The lack of privacy and cookie policies indicates non-compliance with GDPR and other data protection regulations. No incident response or vulnerability disclosure information is available, suggesting limited security maturity. Overall, the website presents a low-risk profile due to minimal data collection and interaction but suffers from poor professionalism and security posture. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving website content and design, and implementing basic security best practices to enhance trust and compliance.

Comparo GmbH is a small, regionally focused general contractor based in Leipzig, Germany, specializing in new construction, building renovation, and apartment refurbishment. Established in 2010, the company serves primarily private stock corporations and large housing associations, leveraging a reliable network of approximately 25 subcontractor firms. Their services extend to construction management, planning, valuation, and supervision, with a focus on efficient and environmentally conscious building practices. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit policies could enhance protection. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a reliable regional general contractor.

S

SBA grupė

sba.lt

66

SBA grupė is a Lithuanian diversified business group uniting creative and innovative talents across various sectors including investment management, real estate, furniture, apparel, services, and modular construction. The company positions itself as a forward-looking conglomerate focused on community and sustainable development. The website is professionally designed using modern technologies such as Vue.js and integrates cookie consent mechanisms compliant with GDPR regulations. The technical infrastructure leverages Cloudflare for DNS and CDN services, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent implemented, although there is room for improvement in security headers and incident response transparency. Overall, the website reflects a mature digital presence with good privacy compliance and business credibility.

D

darnugroup

mgvalda.lt

18

Darnu Group is a Lithuanian real estate development company focused on sustainable and integrated urban projects in Vilnius. Their business model centers on creating residential, commercial, and leisure real estate projects that harmonize human, nature, and city needs. The company has an established market presence since 2017 and targets local and regional real estate buyers and investors. Technically, the website is built on WordPress with Vue.js components, uses modern SEO practices via Yoast, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and well structured, providing a professional user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a credible and professional real estate business with room for improvement in security policy transparency and contact information visibility.

Pali is a UK-based, multi-award winning national conveyancing search provider specializing in delivering accurate and cost-effective conveyancing searches and reports. The company targets conveyancers and legal professionals within the UK real estate sector, offering a one-stop shop for conveyancing search services. The website is built on WordPress using the Divi theme and Gravity Forms, hosted on Hetzner infrastructure, reflecting a moderate level of technical maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies, and no explicit contact information or incident response channels are provided on the site. Overall, the domain age and registration data support the legitimacy of the business. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security posture.

J

JSC NG ARCHITECTS

ngarchitects.lt

37

NG ARCHITECTS is a Lithuanian-based architectural design company specializing in modern villas and residential projects worldwide. The company showcases a professional portfolio with projects across 18 countries and 5 continents, targeting clients seeking exclusive modern residential designs. Their business model focuses on architectural design services with an innovation-driven approach. Technically, the website is built on WordPress using the X Theme and several popular plugins, including Revolution Slider and Contact Form 7. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security-wise, the site uses HTTPS but does not implement important security headers, and no explicit security or incident response policies are found. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website presents a professional image but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

M

MITNIJA

mitnija.lt

39

MITNIJA is a Lithuanian construction company operating as part of the larger DARNU GROUP, one of the largest real estate development and construction groups in Lithuania. The website serves primarily as a landing page informing visitors of this corporate relationship and directs users to the parent company website for more information. The business is well-established with a domain age consistent with its founding year of 2008. The company focuses on construction and real estate development services targeting real estate developers and investors in Lithuania. Technically, the website is minimalistic, built with basic HTML and CSS, and uses Google Fonts for typography. There is no evidence of a CMS or advanced frameworks. The site is moderately optimized for mobile devices but lacks accessibility features and SEO enhancements. No analytics or tracking technologies are detected, indicating a low level of digital maturity. From a security perspective, the site lacks critical security headers and does not present privacy or cookie policies, which are important for GDPR compliance. No contact information or incident response details are provided, limiting transparency and user trust. The domain is registered with a reputable Lithuanian registrar and shows no suspicious patterns, supporting legitimacy. Overall, the website is functional but basic, with significant room for improvement in privacy compliance, security posture, and user engagement. Strategic enhancements in these areas would improve trustworthiness and regulatory compliance.

U

UAB „Resolut"

resolution.lt

58

UAB „Resolut" is a Lithuanian real estate development company specializing in property project development and sales. The website showcases ongoing and completed real estate projects, targeting investors and property buyers within Lithuania. The company is relatively new, founded in 2023, and positions itself as an emerging player in the local real estate market. The site provides clear contact information and maintains an active presence on LinkedIn, Facebook, and Instagram, supporting its business outreach and credibility. Technically, the website is built using modern frameworks such as Astro and Zyro site builder, hosted on Hostinger, and integrates standard analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and performs moderately well, with basic SEO and accessibility features implemented. Security posture is strong with HTTPS enforced and appropriate security headers present, though there is room for improvement in privacy compliance and cookie consent mechanisms. Overall, the website reflects a professional and legitimate business presence with some gaps in privacy and compliance documentation.

M

Mauzy Management

mauzymanagement.com

40

Mauzy Management is a property management company based in San Diego, California, specializing in services for homeowner associations, master planned communities, condominiums, and business/industrial parks. Their service offerings include escrow services, community association management, and consulting. The company positions itself as a professional and trusted regional player with a focus on managing properties as if they were their own. The website content and branding are consistent and professional, targeting property owners and associations in the real estate sector. Technically, the website is built on WordPress using the Divi Builder theme and incorporates common web technologies such as jQuery, Google Tag Manager, and Google Analytics. The site is mobile optimized with good navigation and SEO practices. SSL is properly configured, ensuring secure HTTPS connections. However, the site lacks some security headers and privacy compliance elements such as a privacy policy and cookie consent mechanism. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data, but the absence of WHOIS registration data raises concerns about domain legitimacy. No WAF or blocking mechanisms are detected, allowing full content access. The company demonstrates trustworthiness through BBB accreditation and industry association memberships, supported by active social media profiles. Overall, the website presents a credible business front with room for improvement in privacy compliance and security best practices. The missing WHOIS data is a notable risk factor that should be investigated further to confirm domain ownership and registration legitimacy.

D

DO architects

doarchitects.lt

55

DO architects is a small, established architectural firm based in Vilnius, Lithuania, specializing in architecture, urban planning, and interior design. The company targets innovative clients seeking transformative projects in cities, houses, and landscapes. Their website showcases a comprehensive portfolio of projects and maintains an active social media presence, reinforcing their market position. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrated analytics tools. The site is well-designed, mobile-optimized, and provides clear navigation, although some accessibility features could be improved. Security posture is moderate; while no critical vulnerabilities were found, the absence of security headers and explicit HTTPS confirmation are areas for improvement. Privacy compliance is basic, with a cookie policy and consent mechanism present but no dedicated privacy or terms of service pages. WHOIS data for the domain is unavailable, which limits domain trust verification, but the website content and branding suggest legitimacy. Overall, the site scores well in content quality and business credibility but should enhance security and privacy practices.

L

Leximum advokatų profesinė bendrija

leximum.lt

44

Leximum is a Lithuanian law firm established in 2000, providing a broad range of legal services including real estate law, public procurement, financial law, business law, and defense. The firm positions itself as a trusted partner with over twenty years of experience and a team of highly qualified legal professionals. The website reflects a professional and consistent brand image targeting businesses and individuals seeking legal assistance in Lithuania. Technically, the site uses modern frontend libraries such as Bootstrap, jQuery, and OwlCarousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and well-structured, offering good user experience and SEO optimization. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. WHOIS data for the domain is unavailable, which limits domain trust verification. Overall, the website is professional and credible but could improve in privacy compliance and security best practices.

S

Sobha Realty

sobharealty.com

75

Sobha Realty is a leading luxury real estate developer based in the United Arab Emirates, specializing in high-end apartments, penthouses, villas, and investment properties primarily in Dubai. The company positions itself as a premium brand focused on craftsmanship, thoughtful design, and signature quality, targeting affluent buyers and investors in the UAE real estate market. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, supporting its market position effectively. Technically, the site is built on Drupal CMS, leveraging modern JavaScript libraries and multiple analytics and marketing tools, indicating a well-developed digital infrastructure. Security posture is good with HTTPS enforced and anti-clickjacking measures, though improvements such as enabling DNSSEC and adding security.txt could enhance trust further. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website and domain registration data indicate a legitimate, professional business with a strong online presence and good security hygiene.

7

7A Sevena AB

7a.se

65

7A Sevena AB operates a business center providing unique office and meeting spaces in central Stockholm, targeting a diverse audience from solo entrepreneurs to large corporations. Their offerings include office solutions, event and meeting venues, and a member portal, positioning them as a key player in the real estate and hospitality sectors within the Stockholm market. The website reflects a professional and modern digital presence, utilizing advanced web technologies such as the Astro framework, Cookiebot for GDPR compliance, Google Tag Manager, and Tawk.to for live chat support. The site is well-structured, mobile-optimized, and incorporates multimedia content to engage visitors effectively. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain www.7a.se is a notable concern that impacts trustworthiness and should be investigated further. Overall, the website demonstrates good compliance with privacy regulations and provides clear contact channels, but could improve transparency around security and legal policies.

A

Anywhere Real Estate Inc.

anywhere.re

54

Anywhere Real Estate Inc. is a prominent player in the residential real estate sector, operating multiple well-known brands such as Better Homes and Gardens Real Estate, Century 21, Coldwell Banker, Corcoran, ERA, and Sotheby's International Realty. Founded in 2022, the company has quickly established itself as the largest franchisor of residential real estate brands globally, offering a comprehensive suite of integrated services including franchising, brokerage, title & settlement, relocation, and insurance. The website reflects a professional and consistent brand image targeting real estate professionals, investors, and consumers seeking real estate services. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and hosted on AWS infrastructure. It employs Google Analytics and Site24x7 for performance and user monitoring. The site is mobile-optimized with good SEO and accessibility basics, though some security headers could be enhanced. Privacy and terms policies are present and indicate GDPR compliance, though explicit cookie consent mechanisms are not evident. From a security perspective, the site uses HTTPS with strong SSL configuration and avoids exposing sensitive data. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improving trust and compliance. The domain registration is consistent with the business claims, registered through a reputable registrar, and aligns with the company's founding date. Overall, Anywhere Real Estate Inc. demonstrates a strong market position with a well-executed digital presence. Strategic improvements in security transparency and enhanced privacy controls would further strengthen its security posture and user trust.

C

Coldwell Banker

coldwellbankercareers.com

67

Coldwell Banker Careers website presents a professional and comprehensive platform for real estate professionals seeking career growth, coaching, and wealth building opportunities. The site reflects a mature digital presence with integration of multiple analytics and marketing tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and Bootstrap framework, ensuring good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and published security policies are absent. Privacy compliance is well addressed with TrustArc consent management and clear privacy and cookie policies. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is trustworthy and professional but could improve transparency on security and incident response.

A

American Home Shield

ahs.com

61

American Home Shield is a well-established home warranty service provider with over 50 years of experience, offering comprehensive home warranty plans and repair services to homeowners across the United States. The company operates under the parent company Frontdoor, Inc., and maintains a strong market position supported by consumer awards and extensive member benefits. Their website reflects a mature digital presence with clear branding, detailed service descriptions, and multiple interactive elements to engage users and collect leads. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Microsoft Clarity, Hotjar, Optimizely, and Amazon Connect for live chat support. The site is mobile-optimized, accessible, and SEO-friendly, although some improvements in security headers could enhance the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security-wise, the site uses HTTPS and secure form inputs but lacks visible security headers and explicit security or incident response policies. The WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is common for large enterprises. Overall, the site demonstrates a strong security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with the site showing high professionalism, trustworthiness, and compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.