Retail security reports

N

NOVUS

novus.ua

52

NOVUS is a large Ukrainian retail supermarket chain offering a wide assortment of fresh products, promotions, and online shopping services. The website is professionally designed using Magento platform, integrating modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is accessible, mobile-optimized, and provides customer engagement through contact forms and social media channels. Security posture is good with HTTPS, reCAPTCHA, and standard security headers, though explicit cookie consent and security policies are lacking. WHOIS data confirms legitimate registration consistent with the business claims. Overall, NOVUS demonstrates a mature digital presence suitable for its market position.

R

RETROVILLE

retroville.ua

65

RETROVILLE is a large lifestyle shopping and entertainment center located in Kyiv, Ukraine, offering a wide range of services including shopping, dining, entertainment, sports, and business center facilities. The website presents a modern, well-structured digital presence with good mobile optimization and user experience. It leverages popular analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing strategy. Security posture is solid with HTTPS and CSRF protections, but lacks some advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given the tracking technologies in use. WHOIS data confirms domain legitimacy and consistency with the business location and nature. Overall, the website is professional and credible but should improve privacy and security transparency to enhance trust and compliance.

Ч

Частное предприятие "АйТиМодернСистемс"

zoo-center.by

50

ЗооЦентр is a small local pet store based in Belynichi, Belarus, offering a variety of pet products including food, toys, and care items for cats, dogs, rodents, and birds. The business operates a physical store and maintains an online presence with a catalog showcasing popular brands such as Whiskas, Royal Canin, and Pedigree. The website is built on WordPress and uses Yandex.Metrika for analytics. While the site is well-structured and visually consistent, it lacks some advanced privacy and security features such as cookie consent and security headers. The domain is newly registered in 2024, aligning with the business's recent establishment.

T

The Wholesale Group

thewholesalegroup.co.uk

62

The Wholesale Group operates as a dedicated support organization for independent wholesalers within the retail and foodservice sectors in the United Kingdom. Established in 2019, the company offers award-winning own-brand products and positions itself as a key partner for independent wholesalers. The website reflects a professional and consistent brand image, targeting wholesalers seeking quality products and support services. Technically, the site is built on a modern WordPress platform utilizing WooCommerce for e-commerce capabilities and Elementor for design, enhanced by NitroPack for performance optimization. The infrastructure is hosted by Fasthosts Internet Ltd, a reputable provider, and employs Google Tag Manager and Algolia for analytics and search functionalities, indicating a mature digital presence. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA on forms, though there is room for improvement in implementing security headers and publishing formal security policies. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security transparency to improve compliance and user trust.

Foodlevel is a Lithuanian-based company specializing in the supply and distribution of frozen, fresh, smoked, canned, culinary, and grocery food products primarily targeting the horeca and retail sectors within Lithuania. The company offers logistics and delivery services nationwide, positioning itself as a regional supplier with a focus on quality and customer service. The website content is professionally presented in Lithuanian with an English language option, indicating a focus on local and possibly international business clients. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, Fancybox, and other libraries to provide a responsive and interactive user experience. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Cookie consent and privacy policies are implemented in compliance with GDPR, and Google Analytics is used for traffic analysis. However, no explicit CMS or hosting provider information is discernible. From a security perspective, the site uses HTTPS and includes Google ReCaptcha on forms to mitigate spam. Cookie consent mechanisms are in place, but security headers are not explicitly detected, and no public security or incident response policies are found. The WHOIS data is not publicly available due to EURid privacy restrictions, but the website's professional presentation and contact details support its legitimacy. No critical vulnerabilities or exposed sensitive data were identified. Overall, Foodlevel presents a credible and professional online presence suitable for its business model. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance standing.

F

Titulinis - Feminabona24.com

feminabona24.com

61

Feminabona24.com is a Lithuanian e-commerce website specializing in beauty and personal care products, including hair care, face care, body care, and aromatherapy cosmetics. The site offers a well-structured catalog targeting consumers interested in grooming and wellness products. Technically, the website employs modern JavaScript libraries such as Swiper.js for carousels, integrates Facebook Customer Chat, Google reCAPTCHA for bot protection, and uses New Relic Browser for performance monitoring. The site is hosted via Hostex and uses HTTPS, ensuring secure communication. However, the absence of privacy and cookie policies, minimal security headers, and lack of DNSSEC indicate areas for security and compliance improvement. Overall, the website presents a professional and functional e-commerce platform with moderate security posture and room for enhanced privacy compliance.

U

UAB „Meistro pasaulis"

meistropasaulis.lt

50

Meistro Pasaulis is a Lithuanian-based small retail company specializing in professional hair care cosmetics. The website serves as an e-commerce platform offering a variety of branded hair care products, targeting both individual consumers and beauty professionals. The company positions itself as an official representative of several high-quality hair care brands in Lithuania, providing original products with free delivery for orders over 30 EUR. The site includes a beauty magazine section to engage customers and enhance brand loyalty. Technically, the website employs a custom CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Select2, alongside Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO practices and includes cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and WHOIS data is unavailable due to query limits, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and Google ReCaptcha to protect forms from spam. Privacy and cookie policies are present and accessible, indicating a good level of privacy compliance. No critical vulnerabilities or exposed sensitive data were found. The absence of incident response contacts and security policy pages suggests room for improvement in security transparency. Overall, the website presents a professional and trustworthy front for a niche retail business. Strategic improvements in security headers, WHOIS transparency, and incident response information would enhance the security posture and trustworthiness further.

G

Pradžia - Gopestetika

gopeshop.lt

49

The website www.gopeshop.lt is an e-commerce platform specializing in beauty and skincare products, primarily distributing brands such as GOLD COLLAGEN, INSTITUTE BCN, and FROIKA in the Baltic region. The site targets consumers interested in quality beauty products and operates mainly in Lithuania with sister sites for Latvia, Poland, and English-speaking customers. The business model is focused on online retail with official brand representation, providing customer support via phone and email. Technically, the site uses CMS Made Simple, integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel, and employs security best practices such as HTTPS and security headers. However, the absence of visible privacy and cookie policies indicates gaps in GDPR compliance. WHOIS data was unavailable due to query limits, limiting domain legitimacy verification. Overall, the site presents a professional and functional e-commerce presence with moderate security posture but requires improvements in privacy compliance and transparency.

B

Brigoto

brigoto.lt

48

Brigoto is a Lithuanian e-commerce retailer specializing in modern, high-quality lighting fixtures including LED lamps, torches, and table lamps. The website targets consumers and businesses in Lithuania seeking stylish and functional lighting solutions. The business operates primarily online with a clear product catalog and active social media presence on Facebook and Instagram. The company emphasizes quality products sourced from reliable European manufacturers and offers free shipping over a certain order value and a 14-day return guarantee. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, Fancybox, and integrates Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized with good navigation and SEO practices. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented with GDPR compliance in mind. However, no explicit security policy or incident response contacts are published, and WHOIS data is unavailable due to privacy protection and query limits, which slightly limits trust assessment. Overall, the site presents a professional and trustworthy front for a small retail business in Lithuania.

Humanitas operates as a Lithuanian online bookstore offering over 100,000 books across various categories including academic, fiction, language learning, and children's literature. The website targets Lithuanian and English-speaking customers, providing both online sales and physical bookstore locations. The business appears established with a clear market position in the retail book sector. Technically, the website employs modern web technologies such as Google reCAPTCHA, Facebook Pixel, and Google Tag Manager, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and uses HTTPS, but lacks visible privacy and cookie policies, which impacts privacy compliance. Security posture is generally good with HTTPS and anti-bot measures, but absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy but should enhance privacy disclosures and security practices to strengthen compliance and user trust.

Dimense Decor is a small retail business specializing in innovative wall finishing products designed to enhance interior spaces quickly and easily. The website showcases a variety of product collections, designer collaborations, and galleries, targeting consumers and businesses interested in unique wall decoration solutions. The digital presence is well-structured with good mobile optimization and user experience, leveraging modern JavaScript libraries such as Swiper.js and Fancybox for interactive content. Security posture is moderate with HTTPS enabled and secure forms, but lacks important security headers and privacy compliance documentation. The absence of WHOIS data raises concerns about domain legitimacy, although the active website and professional content mitigate some risk. Strategic improvements in privacy policy implementation, security headers, and domain registration transparency are recommended to enhance trust and compliance.

U

UAB "Šviesos technologijos"

svt.lt

53

UAB "Šviesos technologijos" is a Lithuanian company specializing in retail and services related to lighting technology, with over 20 years of experience. The company offers a wide range of lighting products from well-known international manufacturers and provides lighting design, visualization, and electrical installation services including smart home solutions. Their market position is supported by partnerships with reputable lighting brands and a professional online presence. Technically, the website employs modern web technologies including JavaScript libraries, Google Tag Manager, and Google Analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit privacy and cookie policies are missing, which impacts privacy compliance. Overall, the website is professional, trustworthy, and well-structured, but could improve transparency on privacy and incident response policies.

U

UAB 3B SOLUTIONS

3bsolutions.lt

61

UAB 3B SOLUTIONS is a Lithuanian-based company specializing in the import and distribution of alcoholic and non-alcoholic beverages across the Baltic states. The company represents well-known beverage brands and targets retailers and distributors in Lithuania, Latvia, and Estonia. Their website reflects a professional presence with clear contact details and multilingual support, indicating a regional market focus. Technically, the website employs modern JavaScript libraries such as jQuery, Fancybox, and Swiper, and integrates Google Analytics and Google ReCaptcha for analytics and spam protection respectively. The site is served over HTTPS with cookie consent mechanisms in place, demonstrating a reasonable level of digital maturity and privacy awareness. From a security perspective, the site benefits from HTTPS and basic security practices but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a dedicated privacy policy and cookie consent, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional image with moderate technical sophistication. The absence of WHOIS data limits domain registration insights, but the business credibility and operational transparency are strong. Strategic improvements in security headers, incident response documentation, and accessibility could further enhance the security posture and compliance.

U

UAB „Pakuotės centras“

pakuotescentras.lt

50

UAB „Pakuotės centras“ operates the website hippopack.lt, specializing in the sale of packaging products and related printing services. The company has a decade-long presence in the packaging manufacturing sector, offering a wide range of packaging materials including cardboard boxes, food packaging, paper bags, and custom printing services. The website targets businesses and individuals in Lithuania and possibly neighboring Baltic countries, positioning itself as a reliable supplier with a professional team and loyal customer base. Technically, the website employs modern JavaScript libraries and tracking tools, is served over HTTPS, and provides a good user experience with clear navigation and mobile optimization. However, the absence of visible privacy and cookie policies, as well as lack of WHOIS transparency, slightly reduce trust and privacy compliance scores. Security posture is generally good with HTTPS and no obvious vulnerabilities, but security headers and incident response information are missing. Overall, the site is functional, professional, and credible but would benefit from enhanced privacy compliance and security best practices.

U

UAB SOLEMLUX

solemlux.lt

50

UAB SOLEMLUX is a Lithuanian company established in 2008 specializing in manufacturing and selling high-quality window coverings such as blinds, roller blinds, pleated blinds, and mosquito nets. The company operates a professional e-commerce platform targeting residential and commercial customers primarily in Lithuania and the Baltic region. Their market position is strong as one of the leading providers in their sector, supported by a sizable customer base and extensive order history. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Hotjar, and live chat services, indicating a mature digital presence. Security posture is solid with HTTPS and security headers, though the absence of a cookie consent banner and published security policies suggests room for compliance improvement. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

S

SMK

planetproof.eu

44

On the way to PlanetProof is a sustainability certification label managed by SMK, focused on promoting more sustainable production of food and ornamental plant products. The website serves both consumers and businesses by providing information about the certification, products, and certified holders. It holds a recognized market position as a top sustainability label in the Netherlands, endorsed by environmental organizations such as Milieu Centraal. The business model revolves around certification and consumer awareness to drive sustainable agricultural practices. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and Google Maps API. The site is mobile-optimized and features good SEO practices, although some accessibility features could be improved. Performance is moderate with no major technical issues detected. The site uses HTTPS with a valid SSL certificate, ensuring secure communication. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible sensitive data exposure. However, it lacks some security headers and a visible cookie consent mechanism, which are recommended for enhanced security and compliance with EU regulations. No vulnerability disclosure or incident response information is published, which could be improved to strengthen trust and security posture. Overall, the website is professional, trustworthy, and aligned with its business goals. The lack of WHOIS data is due to privacy protection by the registry and does not detract from the site's legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing contact transparency to further improve security and compliance.

T

The Wholesale Group

fairwayfoodservice.com

62

The Wholesale Group is a UK-based business dedicated to supporting independent wholesalers in the retail and foodservice sectors. The company offers award-winning own-brand products and positions itself as a key partner for independent wholesalers. The website is built on a modern WordPress platform using WooCommerce and Elementor, enhanced with NitroPack for performance optimization. Structured data and SEO best practices are well implemented, contributing to good digital maturity. Security posture is solid with HTTPS enabled and use of reCAPTCHA on forms, though explicit security headers and published security policies are absent. Privacy and cookie policies are not found, indicating a gap in compliance. Overall, the website is professional and trustworthy, with room for improvement in privacy compliance and security transparency.

KBBConnect is a software provider specializing in online pricing software for kitchens, bathrooms, and bedrooms, offering electronic ordering, CRM, and full business management solutions. The company targets retailers, manufacturers, and suppliers within the kitchen, bathroom, and bedroom sectors, positioning itself as an established player with over 20 years of industry experience and partnerships with more than 500 global partners. The website is professionally designed, mobile-optimized, and uses Zoho Sites CMS with Google Tag Manager for analytics. From a technical perspective, the site employs modern web technologies and integrates cookie consent mechanisms, indicating a basic level of privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers and publicly available security policies or incident response information. Overall, the website presents a credible business front with good content quality and user experience but requires improvements in transparency regarding domain registration, contact information, and security policies to enhance trust and compliance.

G

Gledring d.o.o.

withcar.it

59

Withcar.it is an established e-commerce platform operated by Gledring d.o.o., specializing in high-quality, custom-fit automotive accessories such as rubber mats, trunk liners, sunshades, and protective covers. The company holds a strong market position in Slovenia and Italy, emphasizing product quality, customer support, and fast logistics. The website is built on Magento, leveraging modern web technologies and marketing tools including Google Analytics, Facebook Pixel, and Klaviyo for customer engagement and tracking. Security practices are solid with HTTPS and security headers, though improvements like Content-Security-Policy and incident response disclosures are recommended. Privacy policies and cookie consent mechanisms exist but could be enhanced for GDPR clarity. Overall, the site presents a professional, trustworthy, and user-friendly experience with good mobile optimization and SEO.

O

OldMapster - Maps with soul

oldmapster.com

61

OldMapster is a small retail e-commerce business specializing in the sale of antique maps, archive charts, and vintage plots. The company targets collectors, history enthusiasts, and customers seeking unique decorative items. The website is built on WordPress using the Astra theme and Elementor page builder, integrating modern marketing and analytics tools such as Facebook Pixel, Mixpanel, and Mailchimp. The technical infrastructure is solid with HTTPS enabled and Cloudflare DNS, though DNSSEC is not enabled. Security posture is moderate with room for improvement in security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website presents a professional and trustworthy front with consistent branding and clear contact information, but would benefit from enhanced privacy and security disclosures.

S

SUBAN d.o.o.

silux-auto.it

57

Silux-auto.it is a professional e-commerce platform specializing in automotive spare parts and accessories, targeting primarily the Italian market with multi-country presence in Europe. The company, SUBAN d.o.o., offers a comprehensive catalog of over 130,000 parts with an extended return policy, positioning itself as a reliable retailer in the automotive aftermarket sector. The website demonstrates a mature digital infrastructure with modern tracking and marketing technologies integrated, including Google Analytics, Facebook Pixel, and Criteo retargeting services. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and a consent mechanism in place. Overall, the site is professionally designed, mobile-optimized, and provides clear contact information, supporting a trustworthy user experience.

B

B&H Photo

bhphotovideo.com

63

B&H Photo is a well-established retailer specializing in photography, video, audio, and computer equipment, serving professionals and consumers since 1973. The company operates a large e-commerce platform complemented by a physical SuperStore in New York City. Their website reflects a mature digital presence with comprehensive product offerings, expert support, and financing options. Technically, the site employs modern JavaScript frameworks, tag management, and fraud prevention tools, ensuring a robust and performant user experience. Security posture is strong with HTTPS, cookie consent, and anti-fraud measures, though explicit security headers and a public security policy could enhance trust further. Overall, the business demonstrates high credibility and professionalism, though the absence of WHOIS data introduces a minor uncertainty in domain registration transparency.

S

Sil

sil.lt

56

Sil.lt is an established Lithuanian e-commerce retailer specializing in sports and leisure footwear, apparel, and accessories for men, women, and children. The website offers a wide range of original branded products including Nike, adidas, Jordan, and Puma, positioning itself as a key player in the Lithuanian sports retail market. The business model focuses on online sales with fast delivery and a customer-friendly return policy, targeting sports enthusiasts and casual consumers alike. Technically, the site is built on Magento with a modern tech stack including RequireJS, jQuery, and multiple marketing and analytics integrations such as Google Tag Manager, Hotjar, and Criteo. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and secure cookie settings, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is partial; a cookie policy and consent mechanism exist, but no privacy policy page was detected in the analyzed content. WHOIS data is unavailable, which limits domain trust analysis but the website content and branding appear consistent with a legitimate business. Overall, Sil.lt presents a professional e-commerce presence with room for improvement in privacy transparency and security best practices.

B

Bowers & Wilkins

bowerswilkins.com

70

Bowers & Wilkins is a well-established premium audio brand specializing in high-fidelity headphones, loudspeakers, and wireless audio systems. The company operates a professional e-commerce website hosted on Salesforce Commerce Cloud, featuring rich multimedia content and a comprehensive product catalog. The site targets audiophiles and consumers seeking premium sound equipment, leveraging brand partnerships such as with Abbey Road Studios. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and video streaming via Wistia, ensuring a fast and mobile-optimized user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity.

E

ETNO arbata

etnotea.lt

53

ETNO arbata is a Lithuanian small retail business specializing in quality herbal teas and unique blends targeted at tea enthusiasts and gourmands. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies including JavaScript and Webpack. The site is moderately optimized for mobile devices and provides a good user experience with clear branding and relevant content. Security posture is solid with HTTPS enforced and some security best practices implemented, though there is room for improvement in security headers and privacy compliance. The absence of visible privacy and cookie policies, as well as contact information, represents a compliance and trust gap. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and contact transparency.

S

Samlerhuset Group B.V.

samlerhuset.com

53

Samlerhuset Group B.V. is a well-established European retail company specializing in coins, medals, and collectables, operating through subsidiaries in 14 European countries. Founded in 1994, the company has a strong market presence and targets collectors and enthusiasts across Europe. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on AWS infrastructure, and optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is good with visible policies and consent banners. Overall, the domain registration data supports the legitimacy and long-term operation of the business.

S

SKYTECH.LT

skytech.lt

64

SKYTECH.LT is a Lithuanian retail e-commerce company specializing in digital technology products including laptops, desktop computers, tablets, televisions, home electronics, household appliances, and office equipment. The website targets Lithuanian consumers and positions itself as a local electronics retailer with a medium-sized business profile. The site features a professional design with good content relevance and clear navigation, optimized for mobile devices. The company demonstrates digital maturity through the use of multiple analytics and marketing technologies such as Google Tag Manager, Facebook SDK, Hotjar, and Cookiebot for privacy compliance. Security posture is moderate with basic security headers and cookie consent mechanisms in place, but lacks visible advanced security policies or incident response information. WHOIS data is unavailable due to query limits, but no suspicious indicators are present on the site, and trust signals such as Google and Microsoft site verifications support legitimacy. Overall, the website is professional, privacy compliant, and well-positioned in its market segment.

S

Sorbum Lithuania

sorbum.eu

59

Sorbum Lithuania is a small regional marketing agency specializing in shopper marketing services across the Baltic states, including Lithuania, Latvia, and Estonia. The website presents a professional image with clear navigation and multilingual support, targeting retail businesses and marketing professionals. The company emphasizes shopper marketing as a key service, supported by a portfolio and awards section. Technically, the site is built on WordPress and uses modern web technologies such as jQuery, Snap.svg, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

M

METAWOOD

metawood.eu

43

METAWOOD is a large, established company specializing in turnkey shopfitting solutions for retail sectors including fashion, jewelry, cosmetics, and luxury stores. The company leverages advanced manufacturing capabilities and a skilled workforce to serve international clients, positioning itself as a leader in the retail shopfitting industry. Their website reflects a professional and consistent brand image with comprehensive service offerings and a strong portfolio showcasing global projects. Technically, the website is built on WordPress with common industry plugins and frameworks, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA implemented, though improvements are recommended in security headers and library updates. Privacy compliance is addressed with visible cookie consent and policy pages. Overall, the website is trustworthy and professionally maintained, supporting METAWOOD's market position effectively.

U

Uncle Bobs Bakery

unclebobs.com.au

46

Uncle Bobs Bakery is a small Australian retail bakery business specializing in gourmet breads, cakes, pastries, pies, and coffee, with an additional wholesale division through Creative Crusts Baking Company. The website is built on WordPress using Foundation CSS framework and includes modern JavaScript libraries such as jQuery and Slick Carousel. The site is hosted behind Cloudflare DNS but does not show signs of active WAF blocking or security challenges. Security posture is moderate with HTTPS enabled but lacks security headers and privacy compliance mechanisms such as cookie consent or privacy policies. Contact information is clearly provided with physical addresses and phone numbers, but no company email addresses are explicitly listed. The domain WHOIS data is consistent and legitimate, supporting the business credibility. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices.

L

Titulinis | levuo.lt

levuo.lt

43

Levuo.lt is a Lithuanian retail company website focused on representing and distributing multiple fashion brands. The site presents a professional and consistent brand image with clear navigation and a privacy policy page, targeting fashion retail customers and business partners primarily in Lithuania. The business model centers on brand representation and retail distribution, with an e-commerce partner site linked for online sales. Technically, the website is built on WordPress and uses common JavaScript libraries such as jQuery and Masonry, with Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks security headers and cookie consent mechanisms. WHOIS data is unavailable due to query limits, limiting domain trust analysis, but the website's professionalism and consistent branding indicate legitimacy. Overall, the site scores moderately well in content quality, technical implementation, security, privacy compliance, and business credibility.

U

UAB Manjana

manjana.lt

45

UAB Manjana is a Lithuanian company specializing in professional cleaning products, chemicals, and cleaning equipment. The company serves both business clients and private customers through physical stores and online shops, positioning itself as a key player in the Lithuanian cleaning supplies retail sector. Their website offers a comprehensive catalog of cleaning agents, hygiene products, protective equipment, and related accessories, supported by recognized certifications such as ISO and Ecovadis, enhancing their market credibility. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and search functionality. Privacy compliance is addressed with a cookie consent banner and a privacy policy page in Lithuanian, indicating GDPR awareness. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible HTTP security headers, which could be improved to enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data due to query limits or privacy protection does not detract from the legitimacy indicated by the website content and contact information. Overall, UAB Manjana's digital presence is professional and trustworthy, with room for security enhancements and more transparent incident response policies. The company is well-positioned in its market with a solid technical foundation and compliance posture.

M

Mary Kay, Inc.

marykay.com

69

Mary Kay, Inc. operates a globally recognized direct selling business specializing in skin care and color cosmetics. The website serves as the official platform for product sales, brand information, and Independent Beauty Consultant engagement. It holds a leading market position as the #1 direct selling brand in its industry. The technical infrastructure leverages modern web technologies including jQuery, Bootstrap, and VideoJS, supported by extensive analytics and marketing tools such as Google Analytics, TikTok Pixel, and PowerReviews. The site is mobile optimized and provides a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforced and consent mechanisms for privacy and cookies, though some security headers could be improved. The absence of WHOIS data is noted but does not detract from the overall legitimacy given the brand's stature. Strategic recommendations include enhancing security headers and accessibility features to maintain compliance and trust.

R

Rodes For Him | For Her

rodes.com

60

Rodes For Him | For Her is a small retail fashion specialty store based in Louisville, Kentucky, offering men's and women's fashion, personal styling, tailoring, and formal wedding group services. The website is professionally designed using the Wix platform, featuring structured data that clearly identifies the business location and contact phone number. However, the domain WHOIS data is unavailable, raising questions about domain registration legitimacy. Technically, the site uses modern web technologies provided by Wix, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enforced but lacks explicit security headers and privacy compliance mechanisms such as privacy and cookie policies. Overall, the site presents a professional front but would benefit from enhanced security and compliance features to improve trustworthiness and regulatory adherence.

T

TOBIS, UAB

tobis.lt

59

TOBIS, UAB is a well-established distributor of automotive consumables and related products operating primarily in Lithuania, Latvia, and Estonia. Founded in 1992, the company represents numerous reputable brands and offers both B2B and B2C sales channels, including a dedicated B2B platform. The website reflects a professional and regionally focused business with a clear market position as a leading distributor in the Baltic automotive sector. Technically, the website is built on the OpenCart platform, utilizing modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and includes standard e-commerce features like product search, category navigation, and customer support chat. Analytics and marketing tools such as Google Analytics and Facebook Pixel are integrated, supporting moderate user tracking compliant with GDPR. From a security perspective, the site enforces HTTPS and uses secure forms with AJAX validation. However, it lacks explicit security headers and does not provide public security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Cookie consent mechanisms are implemented, supporting privacy compliance. Overall, the website presents a trustworthy and professional digital presence for TOBIS, UAB, with room for improvement in security transparency and WHOIS data availability. The absence of WHOIS details limits domain trust verification, but business information and contact details support legitimacy.

Gemega is a Lithuanian retailer specializing in mattresses, beds, couches, and mattress toppers aimed at providing quality sleep products. The website presents a professional and user-friendly e-commerce platform with clear navigation and product categorization. The company targets consumers in Lithuania seeking comfortable and customizable sleep solutions. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Tag Manager and Analytics for marketing and tracking, and employs Google reCAPTCHA for form security. The site is fully HTTPS secured, with a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and published security policies are absent, which could be improved to enhance security posture. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site is well-structured, secure, and compliant with privacy norms, supporting a trustworthy online retail presence.

The Kraft Heinz Company website presents a well-structured corporate presence for a leading global food and beverage manufacturer. The company is positioned as a major player in the industry with a portfolio of iconic brands and a focus on quality and nutrition. The website targets consumers, investors, job seekers, and suppliers, providing dedicated sections for brands, company information, investor relations, press releases, and careers. The technical infrastructure leverages modern web technologies including Google Analytics, Google Tag Manager, jQuery, and Bootstrap, supporting a responsive and user-friendly experience. Privacy and cookie policies are prominently featured with consent mechanisms, reflecting compliance with data protection regulations. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though the absence of security headers and explicit incident response contacts suggests room for improvement. The WHOIS data is notably missing, which is unusual for a corporate domain and slightly reduces trust from a domain registration perspective. Overall, the website is professional, informative, and trustworthy, with moderate technical and security maturity.

Lush is a well-established global retailer specializing in fresh, handmade cosmetics that are vegetarian and cruelty-free. The company operates a sophisticated e-commerce platform complemented by physical retail stores and spa services. Their market position is strong, supported by a clear ethical stance and a loyal customer base. The website reflects a mature digital presence with excellent content quality, mobile optimization, and clear navigation. Technically, the site uses modern frameworks such as Next.js and React, with integrations for image optimization, customer reviews, and live chat support. Security posture is robust with HTTPS, security headers, and secure forms, though there is room to improve transparency by publishing dedicated security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of publicly available WHOIS data slightly reduces trust but is not uncommon for large brands using privacy services.

U

UAB Dominicus Lituanus

dominicus.lt

62

UAB Dominicus Lituanus operates an e-commerce bookstore specializing in Lithuanian children's and young adult literature. The company emphasizes quality content and presentation, targeting families and young readers in Lithuania. Their market position is niche but well-defined, leveraging Shopify's platform for online retail. Technically, the website is built on Shopify with modern integrations including Google Tag Manager, Omnisend, and hCaptcha, ensuring good performance, mobile optimization, and basic security hygiene. Security posture is strong with HTTPS and spam protection, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable due to query limits, the business information and domain usage appear legitimate.

Coop Norge SA operates a large cooperative retail business in Norway, focusing on grocery and building materials through multiple store chains such as Coop Mega, Coop Prix, and Obs. The website serves as a digital platform for product offers, recipes, membership benefits, and store information, targeting Norwegian consumers interested in daily goods and home improvement. The business model emphasizes member benefits and cashback, reinforcing customer loyalty and cooperative values. Technically, the website employs modern web technologies including React, Contentful CMS, and integrates analytics and A/B testing tools like Google Tag Manager and Kameleoon. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The domain WHOIS data is not publicly available due to Norwegian registry policies but aligns with a legitimate cooperative retail entity. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

C

CAPS Group

caps-group.com

54

CAPS Group is a well-established European company specializing in bespoke fixtures and fit-out solutions for retail, interiors, and hospitality sectors. Founded in 2009, the company operates multiple subsidiaries across Europe and beyond, offering a comprehensive one-stop-shop service package including design, manufacture, installation, and maintenance. Their market position is supported by ISO certification and a strong local presence in key countries. Technically, the website is built on a mature WordPress platform with WooCommerce and WPML for multilingual support, optimized for performance and SEO. Security posture is good with HTTPS enabled and GDPR compliance evident through cookie consent mechanisms, though improvements in security headers and DNSSEC are recommended. Overall, the website reflects a professional and trustworthy business with moderate to high digital maturity.

F

FOREO

foreo.com

67

FOREO is a Swedish beauty and wellness company specializing in innovative skincare and oral care devices. The company positions itself as a leader in beauty-tech solutions, targeting consumers seeking professional-level personal care products. The website is well-designed, mobile-optimized, and rich in content, showcasing a broad product range and strong brand presence supported by celebrity endorsements and numerous awards. Technically, the site uses Drupal 10 CMS with modern security practices including HTTPS and Google reCAPTCHA, indicating a mature digital infrastructure. However, the absence of publicly available WHOIS data for the domain is unusual for a brand of this size and should be monitored for legitimacy concerns. Privacy and cookie policies are comprehensive and GDPR compliant, but explicit security policy and incident response contacts are not found. Overall, the site demonstrates a strong security posture and business credibility with room for improvement in transparency around security policies and domain registration details.

S

Saga Furs Oyj

sagafurs.com

65

Saga Furs Oyj operates as a full-service auction house specializing in high-quality fur sourced from strictly regulated European farms. The company positions itself as a leader in the fur auction market with a strong emphasis on sustainability, corporate governance, and innovation through its Creative Hub and digital services. The website reflects a mature business with comprehensive information on auctions, sustainability, and corporate disclosures, targeting industry professionals, designers, and buyers worldwide. Technically, the site is built on WordPress with modern frameworks and plugins, hosted on WP Engine, and optimized for SEO and mobile use. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the detailed corporate information presented. Strategic recommendations include enhancing security headers, publishing an incident response policy, and maintaining up-to-date software to mitigate risks.

A

Alikante

alikante.lt

41

Alikante is a Lithuanian-based retail and e-commerce company specializing in footwear and accessories for men and women. The company operates a professional website offering a 2024 collection of shoes and related products, supported by physical stores across Lithuania and Latvia. Their market position is that of an established regional footwear retailer with a medium-sized business footprint. The website is well-structured, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website leverages a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools. The platform appears to be built on OpenCart, a popular e-commerce CMS. Performance is moderate with good mobile optimization and SEO practices. Security is adequate with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. The security posture is solid but could be improved by implementing additional HTTP security headers and publishing a formal security policy or incident response contacts. The WHOIS data is unavailable due to query limits, but the website’s content and contact details indicate legitimacy and consistent business operation since 2017. Overall, the website presents a trustworthy and professional online presence with room for security enhancements.

F

Farmacias Ahumada

farmaciasahumada.cl

67

Farmacias Ahumada is a prominent Chilean pharmacy chain offering a comprehensive online platform for purchasing medications and health-related products. The website targets consumers in Chile, providing services such as uploading prescriptions and accessing exclusive benefits through user accounts. The business operates primarily in retail, healthcare, and e-commerce sectors, positioning itself as a leading pharmacy with a strong digital presence. Technically, the website leverages Salesforce Commerce Cloud as its CMS and platform, integrating modern technologies including Google reCAPTCHA, Google Tag Manager, Taboola advertising, and Microsoft Clarity analytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. Performance is moderate, with a well-structured navigation system and professional design. From a security perspective, the site enforces HTTPS and employs bot protection mechanisms. However, explicit security headers are not fully confirmed, and there is a lack of published security policies or incident response contacts. Privacy compliance is limited, with no visible privacy or cookie policies and no consent mechanisms detected. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and explicit security documentation to enhance user trust and regulatory adherence.

K

KosmetikosDNR

kosmetikosdnr.lt

47

KosmetikosDNR is a Lithuanian content platform specializing in cosmetic product reviews, ingredient analysis, and skincare education. The website targets Lithuanian-speaking consumers interested in detailed cosmetic information and product recommendations. It operates as a content-driven retail and informational service with a niche market position in Lithuania. Technically, the site is built on WordPress with Bootstrap and jQuery, integrates multiple third-party analytics and marketing tools, and enforces HTTPS with CSRF protections. Security posture is good with room for improvement in HTTP security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. The absence of WHOIS data limits domain trust verification, but the site presents as professional and trustworthy. Overall, the website scores well in content quality, technical implementation, security, privacy, and business credibility.

R

Reebok

reebok.com

73

Reebok is a globally recognized athletic brand offering footwear, apparel, and gear through a professionally designed e-commerce website hosted on Shopify. The site targets athletes and fitness enthusiasts with a strong emphasis on performance and style. The digital infrastructure leverages modern technologies including Google Tag Manager, Facebook Pixel, Forter fraud prevention, and New Relic monitoring, indicating a mature and well-maintained platform. Privacy compliance is robust with clear cookie consent mechanisms and GDPR adherence. However, the absence of WHOIS data and registrant information is unusual for a brand of this stature, though the website content and branding strongly support legitimacy. Security posture is solid with HTTPS enforcement and security headers, but lacks publicly available security policies or incident response contacts.

O

O'Sullivan Antiques

osullivanantiques.com

71

O'Sullivan Antiques is a well-established antiques dealer operating primarily in Dublin, Ireland, with an additional gallery in New York. Founded in 1990, the company offers antiques sales, restoration services, and maintains an active presence through news and events. The website serves as both an informational and e-commerce platform, showcasing a range of antiques with detailed product listings. The business targets antiques collectors, interior decorators, and retail customers interested in authentic antiques. The company maintains a consistent brand image and provides multiple contact channels including physical addresses, phone numbers, and emails.

U

UAB FRAGRANCES INTERNATIONAL

fragrances.lt

45

UAB FRAGRANCES INTERNATIONAL operates as a wholesale supplier of perfumes, cosmetics, and accessories primarily targeting the Baltic region. The company positions itself as a leader in wholesale perfumery and cosmetics distribution in Lithuania and neighboring countries. The website is multilingual, supporting Lithuanian, Russian, and English languages, indicating a regional focus and international customer base. The business model centers on wholesale distribution, catering to retailers and distributors rather than direct consumers. Technically, the website is built on WordPress 4.9.3 with several plugins including Visual Composer for page building, Contact Form 7 for forms, and WPML for multilingual support. The site uses HTTPS with a valid SSL certificate, ensuring encrypted communication. The technical stack is moderately modern but uses somewhat outdated WordPress and jQuery versions, which may pose security risks if not updated. The site is mobile-optimized and has good navigation and SEO practices, but accessibility features are basic. From a security perspective, the site lacks visible security headers such as Content-Security-Policy or HSTS, which are recommended to enhance protection against common web attacks. No privacy or cookie policies are present, which is a compliance gap especially under GDPR regulations applicable in the EU. No contact emails or phone numbers are explicitly found in the provided HTML, limiting direct communication channels. The WHOIS data is unavailable due to query limits, preventing verification of domain registration details and reducing transparency. Overall, the website presents a professional and functional online presence for a wholesale perfume supplier but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and regulatory adherence.