Medium-risk security reports

Lavango is a medium-sized manufacturing subcontracting company based in Lithuania specializing in material handling equipment, engineering, welding assemblies, robotization, and automation integration. The company serves manufacturing clients seeking to outsource production and engineering services, boasting over 2250 completed projects and a presence in over 20 export countries. Their website is professionally designed using Webflow CMS and integrates modern analytics tools such as Google Analytics and Tag Manager. The site is mobile optimized and provides clear navigation and contact information, including email, phone, and physical address. However, the absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. WHOIS data is unavailable due to EURid privacy policies, which is typical for European domains, but this limits domain age and registrant verification. Overall, Lavango presents a credible and professional business front with room for improvement in privacy compliance and security hardening.

Omberg group is a Lithuanian real estate development company specializing in creating residential and commercial properties described as 'heartfelt homes'. The company holds a strong market position as the second largest new apartment seller in Vilnius in 2023. Their website showcases multiple projects, targeting home buyers and investors, with a professional and modern digital presence. The technical infrastructure is built on WordPress with advanced SEO and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity, indicating a mature digital marketing strategy. Security posture is good with HTTPS, reCAPTCHA protection on forms, and error monitoring via Sentry, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a legitimate, professional business with a strong focus on user experience and marketing effectiveness.

Agrokoncernas is a Lithuanian company specializing in the sale of agricultural machinery and related agricultural services. The company targets farmers and agricultural businesses within Lithuania, offering high-quality equipment and a range of agricultural inputs and consulting services. The website reflects a medium-sized enterprise with a consistent brand presence and a focus on the local agricultural market. Technically, the site is built on the Sylius e-commerce platform and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response information. The absence of WHOIS data limits full domain trust verification, but the website content and related domains suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and security posture, with room for improvement in privacy compliance transparency and security policy disclosures.

The website retaleurope.eu currently serves as a placeholder page hosted on Kinsta WordPress Hosting, indicating that domain configuration is pending. There is no substantive business content, contact information, or policies available on the site. The page includes minimal technical elements such as Google Fonts and SVG graphics but lacks any forms, analytics, or tracking mechanisms. The WHOIS data shows the domain is registered with UAB "Interneto vizija", a legitimate Lithuanian registrar, but no further registrant details are provided. Overall, the website is not yet operational and does not present any business or security information to users. From a technical perspective, the site is built on WordPress and hosted by Kinsta, but the current state is a basic placeholder with limited mobile optimization and no SEO or accessibility features. Security posture is weak due to the absence of HTTPS enforcement details, security headers, and incident response information. Privacy compliance is non-existent as no privacy or cookie policies are found. The security posture is minimal with no visible vulnerabilities but also no best practices implemented. The lack of contact and business information reduces trustworthiness and business credibility. There is no evidence of WAF or security blocking mechanisms, so the site is accessible but not functional. Strategic recommendations include completing domain configuration, deploying actual website content, implementing standard security headers and HTTPS, adding privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance.

The website viasat.com is currently inaccessible due to a 403 error generated by AWS CloudFront, indicating that requests are blocked possibly due to traffic volume or configuration issues. This prevents extraction of any meaningful content, metadata, or business information from the site. The domain is long-established, created in 1993, and registered through Authentic Web Inc. with no privacy protection enabled, which supports legitimacy. Hosting infrastructure utilizes Amazon AWS CloudFront CDN and DNS services. Due to the content block, no privacy, cookie, or security policies are available for review, and no contact information or business details can be confirmed. The security posture cannot be fully assessed, but the lack of DNSSEC and security headers is noted as a minor gap. Overall, the site’s digital maturity and compliance status cannot be evaluated accurately under current conditions.

The Kraft Heinz Company website presents a well-structured corporate presence for a leading global food and beverage manufacturer. The company is positioned as a major player in the industry with a portfolio of iconic brands and a focus on quality and nutrition. The website targets consumers, investors, job seekers, and suppliers, providing dedicated sections for brands, company information, investor relations, press releases, and careers. The technical infrastructure leverages modern web technologies including Google Analytics, Google Tag Manager, jQuery, and Bootstrap, supporting a responsive and user-friendly experience. Privacy and cookie policies are prominently featured with consent mechanisms, reflecting compliance with data protection regulations. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though the absence of security headers and explicit incident response contacts suggests room for improvement. The WHOIS data is notably missing, which is unusual for a corporate domain and slightly reduces trust from a domain registration perspective. Overall, the website is professional, informative, and trustworthy, with moderate technical and security maturity.

Tikkurila Oyj is a well-established Finnish manufacturer of paints and coatings, operating since 1997 and now part of the PPG group. The website provides comprehensive investor relations content including financial statements, sustainability reports, corporate governance, and AGM materials, targeting consumers and investors. The technical infrastructure is modern, leveraging Drupal 10 CMS, Microsoft Azure DNS hosting, and Google Tag Manager for analytics. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is limited on this page with no explicit privacy or cookie policies found. Overall, the domain and website reflect a legitimate, professional business with strong market presence in manufacturing.

Odyscience is a Belgian company specializing in international business development for companies operating in the life sciences sector. With nearly 20 years of experience, they leverage a broad international network of over 5000 decision-makers in hospitals, biotechnology, and pharmaceutical sectors to help clients expand export sales. Their services are tailored and transparent, focusing on market access, field and desk support, and full export solutions. The website is professionally designed using WordPress and the Avada theme, with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding suggest a credible business. Contact information is clearly provided, including phone, email, physical address, and a contact form.

Kūrybos terapijos namai is a Lithuanian-based small business specializing in art therapy and psychological consultations for children, adults, families, and groups. Their offerings include individual and group art therapy sessions, psychological support, creative workshops, and gift vouchers. The website is professionally designed using Hostinger Website Builder and Zyro ecommerce platform, integrating modern technologies such as Astro framework and Google Fonts. Marketing efforts include Facebook Pixel for tracking and retargeting. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data is unavailable due to query limits, limiting domain trust analysis. Overall, the site presents a credible and professional front for a local healthcare and education service provider.

Withlocals is a travel platform that connects travelers with local hosts offering private tours, food experiences, and home dinners across multiple global destinations. The website presents a professional and user-friendly interface built on modern web technologies such as React and Next.js, with integration of analytics tools like Google Tag Manager and Plausible Analytics. Despite the strong digital presence and good content quality, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Furthermore, the lack of visible privacy and cookie policies, as well as missing security headers, indicates gaps in compliance and security posture. Overall, the platform appears functional and credible from a business perspective but would benefit from enhanced security and privacy measures to improve trust and compliance.

rSchoolToday is a well-established software platform specializing in athletics and activities management for educational institutions such as high schools, districts, and state associations. Founded in 2001 and recently acquired by Arbiter, the company offers a comprehensive suite of integrated tools including scheduling, registration, mobile apps, and publishing solutions. The platform serves over 11,000 schools and maintains a high retention rate, indicating strong market presence and customer satisfaction. Technically, the website is built on WordPress with Elementor and integrates HubSpot for marketing and analytics. The infrastructure is hosted with Amazon-related services, ensuring reliable performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status locks to protect domain integrity. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No privacy or cookie policies were found, which is a compliance gap, especially for GDPR. The use of HubSpot scripts indicates moderate user tracking. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident response. Strategic improvements in these areas would strengthen trust and reduce risk.

The website pulsetip.com is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by Cloudflare's Error 526. This prevents any meaningful content from being displayed to visitors, severely limiting the ability to assess the business or its services. The domain is registered with NameCheap, Inc. since 2015, indicating some longevity, but the lack of accessible content and security issues significantly impact trust and usability. Technically, the site relies on Cloudflare for CDN and security services, but the origin server's SSL misconfiguration undermines this protection. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the page. Overall, the site exhibits poor content quality, minimal technical implementation, and a weak security posture due to the SSL failure.

ub.lt is a Lithuanian online media portal focused on delivering news, lifestyle content, recipes, health, and event information to a Lithuanian-speaking audience. The website is built on WordPress using popular plugins such as Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The site integrates advertising networks and tracking tools to support its business model, which appears to be advertising-driven. Social media presence on Facebook, Instagram, and Pinterest supports audience engagement and brand visibility. Technically, the website demonstrates good SEO practices, mobile optimization, and moderate performance. Security posture is adequate with HTTPS enforced and consent management implemented, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. However, the absence of visible contact emails or phone numbers and lack of security policy or incident response information slightly reduce trust. WHOIS data is unavailable due to query limits, which limits the ability to verify domain registration legitimacy. Despite this, the website content and technical indicators suggest a legitimate and professional media portal. Strategic recommendations include enhancing security headers, improving accessibility, and providing clearer contact and security information to strengthen trust and compliance.

Bang & Bonsomer is a well-established Finnish company specializing in the development and provision of smart additives and advanced material technologies across diverse industries such as food, construction, beauty, packaging, and more. With over 90 years of pioneering innovation, the company operates through multiple specialized business divisions and subsidiaries, serving a global B2B market. The website reflects a professional digital presence built on WordPress, incorporating modern SEO and analytics tools, and providing comprehensive contact information and cookie consent mechanisms. However, the absence of WHOIS domain registration data and explicit privacy policies introduces some trust and compliance concerns. Security posture is generally good with HTTPS and cookie consent implemented, but could be enhanced with additional security headers and formal policies. Overall, the site demonstrates a mature business with room for improvement in transparency and security documentation.

Aesthetika Seevetal Kosmetikinstitut is a small local beauty and cosmetic service provider based in Seevetal, Germany. The business offers a range of cosmetic treatments including facial care, foot care, make-up, depilation, permanent make-up, and nail care, targeting a broad audience interested in personal care and beauty. The website serves as an informational portal with basic navigation and contact details, reflecting a modest digital presence appropriate for a small service business. Technically, the website is built using basic HTML, CSS, and JavaScript, with the phpWebEd CMS platform. It includes legacy technology such as SWFObject for Flash content, which is outdated and poses security and compatibility risks. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism or privacy policies are present, indicating gaps in privacy compliance. The site shows moderate performance and basic accessibility but lacks mobile optimization. From a security perspective, the site uses HTTPS as implied by the Google Analytics script source, but no security headers were detected in the provided data. The absence of privacy and cookie policies, combined with outdated Flash usage and lack of security headers, lowers the overall security posture. Contact information is clearly provided, but no incident response or security policy information is available. Overall, the website is functional and provides essential business information but requires improvements in privacy compliance, security best practices, and modernization of technical components to enhance trustworthiness and regulatory adherence.

Zoom TV is a Lithuanian media service provider specializing in live streaming, event filming, and technical event support. Their services cater to a broad range of clients including sports events, TV shows, concerts, conferences, and virtual or hybrid events. The company positions itself as a professional and experienced provider with a strong portfolio and client base. Technically, the website uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Tag Manager for tracking, and employs reCAPTCHA for form security. The site is well-structured, mobile-optimized, and provides rich multimedia content showcasing their work. Security posture is moderate with some best practices like HTTPS and reCAPTCHA but lacks visible security headers and explicit security policies. WHOIS data is unavailable due to query limits, which limits domain trust verification but the website content and contact information support legitimacy. Overall, the site presents a professional and credible business presence with room for improvement in privacy and security transparency.

Nova Fabrica Ltd is a specialized technology and manufacturing company focused on advanced vacuum, plasma, and surface engineering solutions. Their offerings include critical subsystems and components for OEM vacuum coating and plasma processing systems, targeting production yield optimization, energy efficiency, and quality assurance. The company positions itself as a niche provider with unique in-house developed products and complementary third-party components, serving a global industrial audience. Technically, the website is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is well-designed, mobile-optimized, and provides clear navigation and detailed product information. Security posture is solid with HTTPS and domain locking, but lacks DNSSEC and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service documents. Overall, the website reflects a credible and professional business presence with room for improvement in compliance and security transparency.

UAB „Vilniaus BDT“ is a Lithuanian company specializing in building demolition, dismantling, drilling, cutting, earthworks, road and site construction, and construction material recycling. With over 20 years of experience, it holds a leading position in the Lithuanian demolition sector, serving clients requiring complex construction and infrastructure services. The website reflects a professional digital presence built on WordPress with modern technologies such as Bootstrap, jQuery, and Google Analytics integration, indicating a moderate to good level of digital maturity. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers and policies are absent. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the company presents a credible and trustworthy business profile with clear contact information and partner affiliations.

The website res-publika.com is a Russian-language media portal launched in 2024, focusing on news and analysis in politics, economy, and culture. It serves a niche audience interested in these topics, providing categorized articles and regular content updates. The site uses Joomla CMS with the K2 component and common frontend libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which are recommended for improved protection. Privacy and cookie policies are absent, representing a compliance gap, and the contact email uses a generic Gmail address, which may reduce perceived trustworthiness. No social media or incident response contacts are provided. Overall, the site is functional and content-rich but would benefit from enhanced security and privacy practices to improve trust and compliance.

Digital.ai is a US-based enterprise technology company specializing in software delivery lifecycle solutions, including application security, agile planning, continuous testing, and deployment automation. The company targets Global 5000 enterprises and software development teams, positioning itself as a comprehensive provider of secure and agile software delivery tools. The website reflects a mature digital presence with professional design, structured data, and rich content focused on application security and related services. Technically, the site is built on WordPress with integrations for video hosting, analytics, and marketing automation, demonstrating a modern and functional infrastructure. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy and professional but could improve in privacy transparency and security best practices.

Tonybet.com is an established online sports betting platform targeting Finnish-speaking users, offering legal real-money betting with competitive odds. The website is technically modern, leveraging React, Cloudflare DNS, and AWS Cloudfront CDN for performance and scalability. The site is mobile-optimized and uses structured data for SEO enhancement. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improved protection. Privacy and cookie policies are not visible, indicating potential compliance gaps. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced transparency and security hardening.

CO-SENDER is a small technology company specializing in cross-channel marketing software that integrates email, SMS, and social media platforms to help businesses manage and track their marketing campaigns efficiently. The company positions itself as a provider of a unified communication platform aimed at improving customer engagement and operational efficiency. Their website is professionally designed using Squarespace, featuring clear navigation, multimedia content, and social proof through testimonials and event participation. Technically, the site employs modern web technologies and tracking tools such as Google Analytics, Apollo, and Tawk.to live chat, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though some security policies and incident response information are absent. Privacy compliance is basic, lacking a cookie consent mechanism and detailed GDPR disclosures. The WHOIS data is unavailable, which slightly impacts trust but is not uncommon for small SaaS providers. Overall, CO-SENDER presents a credible and functional online presence with room for improvement in privacy and security transparency.

City24.ee is a prominent Estonian online real estate platform offering property listings and market information primarily targeting Estonian property buyers, sellers, and renters. The website employs a modern React-based frontend with integrations of Mapbox for mapping, Google Fonts, and multiple third-party analytics and advertising services including Facebook Pixel, Gemius, and Google Tag Manager. The technical infrastructure reflects a contemporary digital maturity with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA v3 to mitigate automated abuse; however, the absence of security headers and formal privacy or cookie policies indicates room for improvement in security best practices and compliance. The website lacks explicit contact information and formal policies, which impacts user trust and privacy compliance. Overall, the site is functional and professional but would benefit from enhanced transparency and security hardening.

The website www.daniel-architects.co.za appears to be a small business site built on the Wix platform, likely representing an architectural firm. However, the site lacks substantive business descriptive content, contact information, and privacy or cookie policies, which limits its digital maturity and trustworthiness. The technical infrastructure is standard for Wix-hosted sites, with typical Wix scripts and assets, and the site is accessible without any detected web application firewall or blocking mechanisms. Security posture is basic, with no advanced security headers or policies observed, and no evidence of compliance with GDPR or other privacy regulations. The absence of WHOIS data and registrant information raises concerns about domain legitimacy and registration status, which negatively impacts the overall risk profile. Strategic recommendations include improving transparency by adding privacy and cookie policies, contact details, and enhancing security headers to protect users and improve trust.

Rydges Hotels & Resorts is a well-established hospitality brand providing quality 4 to 4.5 star accommodation across Australia and New Zealand. The company operates multiple hotels and offers event hosting, dining, and gift card services. It is part of the larger Event Hospitality and Entertainment Limited group, which includes several subsidiary brands. The website reflects a professional and consistent brand image targeting travelers seeking comfortable and convenient stays in key locations. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools. Security posture is strong with HTTPS and security headers implemented, though explicit security and incident response policies are not publicly available. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is missing or unavailable, which slightly reduces trust but does not detract significantly from the overall legitimacy given the strong business presence and external references.

The website mfa.lt is currently inaccessible due to a Cloudflare Turnstile security challenge that blocks content until human verification is completed. As a result, no meaningful business or content information is available for analysis. The site appears to be protected by Cloudflare's security infrastructure, but this also prevents automated analysis of its content, metadata, and contact information. WHOIS data is unavailable due to query limits and privacy protection, limiting domain legitimacy assessment. The lack of accessible content and policies indicates a low digital maturity and poor transparency at this time.

UAB Dominicus Lituanus operates an e-commerce bookstore specializing in Lithuanian children's and young adult literature. The company emphasizes quality content and presentation, targeting families and young readers in Lithuania. Their market position is niche but well-defined, leveraging Shopify's platform for online retail. Technically, the website is built on Shopify with modern integrations including Google Tag Manager, Omnisend, and hCaptcha, ensuring good performance, mobile optimization, and basic security hygiene. Security posture is strong with HTTPS and spam protection, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable due to query limits, the business information and domain usage appear legitimate.

The website www.siauliai.lt serves as the official municipal portal for the city of Šiauliai, Lithuania. It provides comprehensive information about city governance, administrative services, community news, and public resources. The site targets residents, businesses, and visitors, offering a broad range of services including e-democracy tools, social support, urban planning, and business licensing. The website is well-structured with consistent branding and a clear navigation system, supporting multiple languages and accessibility features such as sign language information and easy-to-read modes. Technically, the site employs modern JavaScript libraries including jQuery, Moment.js, DataTables, and SweetAlert2, and appears to use Bootstrap for responsive design. The presence of Google Analytics indicates moderate user tracking. The site is mobile optimized and accessible, though SEO optimization is basic. No CMS or hosting provider details were identified from the content. From a security perspective, the site uses HTTPS (implied but not explicitly confirmed), includes a cookie consent mechanism with opt-in/out options, and avoids exposing sensitive data in the HTML. However, no HTTP security headers were detected, and no explicit privacy policy or security incident response information was found. The WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website presents a professional and trustworthy government portal with good content and technical implementation. Security posture and privacy compliance could be improved by adding explicit policies, security headers, and vulnerability disclosure mechanisms. The absence of WHOIS data is a limitation but does not necessarily indicate risk given the official nature of the site.

SALDVA is a Lithuanian spice manufacturing and retail company established in 1994, recognized for its high-quality natural spices and blends. The company targets both consumers and businesses in the food industry, offering a broad product range and private label manufacturing services. The website reflects a medium-sized enterprise with a consistent brand presence and a focus on product quality and customer experience. Technically, the site is built on a modern React and Next.js framework, hosted on Google Cloud infrastructure, and optimized for mobile devices with good performance. Security posture is solid with HTTPS enabled and cookie consent implemented, although additional security headers could enhance protection. Privacy compliance is basic but present, with a privacy policy and cookie banner. No WHOIS data was available due to query limits, limiting domain registration verification. Overall, the site is professional and trustworthy, with room for improvement in contact transparency and security disclosures.

Monimoto is a specialized provider of wire-free, anti-theft GPS trackers for motorcycles, targeting European motorcycle owners. The company operates an e-commerce platform offering smart tracking devices that alert owners via phone calls and GPS coordinates in case of theft. The website demonstrates a good level of digital maturity with integration of modern analytics, marketing, and consent management tools. The technical infrastructure includes Cloudflare DNS, Google Tag Manager, Hotjar, and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and reputable third-party payment processors like PayPal and Stripe integrated, although additional security headers could enhance protection. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and linkage to a detailed privacy policy. However, explicit contact information, terms of service, and security policies are not readily found, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website club-asteria.com is a parked domain primarily monetized through advertising networks such as Sedo, ParkLogic, and Google Ads. It does not represent an active business entity and lacks any substantive content beyond generic information and ad placements. The site targets Finnish-speaking users seeking general information but offers no direct services or products. The technical infrastructure relies on standard HTML5, CSS normalization, and third-party ad scripts, hosted via domain parking providers. Mobile optimization and accessibility are basic, with limited SEO optimization. Security posture is weak, with no visible HTTPS enforcement or security headers, and no privacy or security policies beyond a generic Sedo privacy policy. No contact or business identity information is provided, reducing trustworthiness and business credibility. Overall, the site functions as a monetized placeholder rather than a legitimate business website.

The website kitoks.com is currently inaccessible due to a Cloudflare Error 521 indicating that the origin web server is down and not responding. The domain is registered since 2004 with NameCheap, Inc. and uses Cloudflare as a CDN and security provider. Due to the lack of accessible content, no business description, contact information, or policies are available for analysis. The technical infrastructure shows reliance on Cloudflare but lacks DNSSEC and visible security headers. The security posture is weak due to the server downtime and absence of security best practices visible in the provided data. Overall, the site is currently non-functional, resulting in a low trust and security score. Strategic recommendations include restoring server availability, enabling DNSSEC, and implementing security headers and HTTPS enforcement.

gosavy.com operates as a Lithuanian peer-to-peer lending platform under the company UAB „Bendras finansavimas”. The platform connects borrowers and investors, offering consumer loans, refinancing options, business loans, and real estate financing. It is regulated by the Lithuanian central bank and has established a credible market position with recognitions such as the Gazelė 2022 award. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content primarily in Lithuanian with English alternatives. The technical infrastructure is based on WordPress CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Omnisend. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Contact information is clearly provided with company emails, phone number, and physical address. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, gosavy.com presents a trustworthy and professional online presence in the finance sector.

Metalface operates as a specialized online networking platform dedicated to the metal recycling industry, facilitating connections among over 20,000 companies. It offers verified company profiles, private networking capabilities, real-time market news, price tracking, and private messaging, positioning itself as a niche leader in this sector. The platform is free to use and targets metal recycling professionals and companies primarily in the Netherlands and Europe. The business has a long-standing presence since 2004, supported by consistent domain registration data and a professional web presence. Technically, Metalface employs a modern React and Redux-based tech stack, integrating third-party services such as Google Analytics, OneSignal for push notifications, and Google Maps API for location services. The site uses Bootstrap for responsive design and slick carousel for UI components, indicating a mature and well-maintained infrastructure. Hosting and domain registration are managed via Amazon Registrar and AWS DNS, ensuring reliable uptime and scalability. From a security perspective, the website enforces HTTPS and domain registration protections like clientDeleteProhibited status. However, DNSSEC is not enabled, and no advanced security headers were detected, which could be improved. The absence of a cookie consent mechanism and explicit GDPR compliance indicators suggests partial privacy compliance. No incident response or security policy information is publicly available, which could be a gap in transparency. Overall, Metalface presents a credible and professional platform with good technical implementation and business credibility. To enhance trust and compliance, it should address privacy consent, enable DNSSEC, and publish security policies. These improvements would strengthen its security posture and regulatory alignment, supporting its continued growth and market leadership.

The website racinghorses.eu is currently inaccessible due to a security challenge page implementing a proof-of-work CAPTCHA mechanism. This indicates the presence of a Web Application Firewall or similar security control blocking direct access to the site's content. The WHOIS data shows the domain is registered to Kauno technologijos universitetas, an academic institution, which does not align with the domain name or expected business content. No business descriptions, contact information, or privacy policies are available on the page, limiting the ability to assess the business or compliance posture. Technically, the site uses JavaScript with cryptographic functions and is hosted behind AWS Cloudfront CDN. However, no security headers or HTTPS details are visible in the provided data. Overall, the site appears to be either under protection or misconfigured, resulting in minimal accessible content and low trustworthiness.

Modulit is a specialized distributor of professional audiovisual (AV) equipment and office business solutions, targeting professional AV integrators and office equipment buyers. The website presents a comprehensive catalog of AV products, including video walls, projectors, conferencing systems, ergonomic office solutions, and professional audio equipment. The business model focuses on distribution and providing value-added services such as product configurators and ProAV training sessions. The company maintains a consistent brand presence with active social media channels on LinkedIn and YouTube. Technically, the website employs a modern technology stack including jQuery, Select2, GDPR consent management via Klaro, and multiple analytics and tracking services such as Google Tag Manager, Snitcher, Lfeeder, and Albacross. The site appears to be built on the CS-Cart platform, offering good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers like Content-Security-Policy and does not publicly disclose privacy policies, terms of service, or incident response procedures. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to privacy protection, which is common but reduces transparency. Overall, the website is professional and functional with moderate security and privacy compliance. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance trust and compliance.

Policy Impact Lab is a consulting and research organization focused on supporting public, private, and third sector organizations in designing, implementing, and evaluating development-oriented policies and programs. Their expertise spans thematic areas such as democracy and human rights, social policy, migration management, development cooperation, and culture/social development. The website presents a professional and well-structured digital presence, leveraging modern web technologies including Webflow, Google Fonts, Google Charts, Google Maps API, and analytics platforms like Piwik PRO and Google Tag Manager. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is generally good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. Contact information and incident response details are not provided, limiting user trust and compliance with privacy regulations. Overall, the website is functional and informative but would benefit from enhanced transparency and compliance documentation.

PassCamp is a technology company specializing in integrated password vault solutions designed to protect and control passwords within organizations. Their offerings include a range of password management features such as two-factor authentication, secure password sharing, and enterprise-grade customizable solutions including white label and licensed software. The company targets business customers, particularly medium-sized and larger enterprises seeking scalable and secure password management systems. The website presents a professional and consistent brand image with clear navigation and relevant content focused on their core services. Technically, the website is built using the Hugo static site generator, Bootstrap framework, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The domain is registered with NameCheap and uses Cloudflare DNS services. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security practices include HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and DNSSEC implementation. From a security posture perspective, the site demonstrates good practices such as clientTransferProhibited domain status and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and a vulnerability disclosure policy indicates areas for enhancement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner supporting GDPR compliance. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, PassCamp's website reflects a trustworthy and professional business with a solid technical foundation and a good security baseline. Strategic improvements in DNS security, security headers, and incident response transparency would further strengthen their security posture and trustworthiness.

A.SPIRE is a European association dedicated to managing and implementing the SPIRE Public-Private Partnership, focusing on enabling technologies and best practices for a resource-efficient process industry. The website positions A.SPIRE as a key player in the European process industry sustainability and innovation landscape, targeting industry stakeholders, policymakers, and research communities. The business model is that of a non-profit association facilitating partnerships and research roadmaps to achieve climate-neutral and circular industry goals. Technically, the website is built on Drupal 7 with Bootstrap and jQuery, leveraging modern web technologies such as Font Awesome and Google Analytics for tracking. The site is mobile optimized and presents good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. Performance is moderate, with external dependencies on common CDNs. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations like GDPR. However, no explicit security headers or incident response contacts are present, and the use of an older CMS version may pose risks if not properly maintained. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with privacy norms, though it could benefit from enhanced security practices and clearer contact information. The domain WHOIS data is unavailable due to .eu privacy policies, which is typical and not suspicious. The AI score reflects a good balance of content quality, technical implementation, security posture, privacy compliance, and business credibility.

Widen legal is an international law firm based in Lithuania, providing high-quality legal services to businesses and private clients. The firm offers a broad range of legal expertise including corporate law, banking and finance, tax, labor law, data protection, and dispute resolution. The website reflects a professional and modern digital presence, built on WordPress with multilingual support and SEO optimization. The technical infrastructure includes Cloudflare DNS and Google Tag Manager, with security features such as HTTPS and reCAPTCHA implemented. While the site has a cookie consent mechanism and privacy policy, it lacks explicit security policies and incident response information. Overall, the website is trustworthy and well-positioned for its market segment.

The website www.itlogas.com appears to be a minimal Wix-based site with very limited content and no visible business or contact information. The absence of WHOIS registration data raises significant concerns about the domain's legitimacy. Technically, the site uses Wix infrastructure and includes Sentry for error monitoring, but lacks essential security headers and privacy compliance mechanisms. The overall security posture is weak due to missing policies and transparency. This results in a low trust and credibility score, indicating the site is not suitable for professional or commercial use without significant improvements.

Asociacija LYDERĖ is a Lithuanian non-profit association that unites nearly 200 top-level leaders and experts across various fields to promote a society free of gender stereotypes and empower women in leadership roles. The website reflects a professional and consistent brand image, targeting high-level executives and experts interested in gender equality and leadership development. Technically, the site is built on the Webflow CMS platform, utilizing modern web fonts and asynchronous script loading for performance. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are absent, which impacts compliance scores. WHOIS data is unavailable due to query limits, but the domain appears legitimate and privacy protection is typical for such organizations. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and explicit contact/security information.

GM Financial is a large finance company specializing in personal and commercial auto loans and lease programs, affiliated with General Motors. The website serves consumers and businesses globally, offering account management, financing applications, and current offers. The digital infrastructure is built on Adobe Experience Manager with modern analytics and tracking technologies, ensuring a professional and responsive user experience. Security measures include HTTPS, reCAPTCHA, session management, and secure forms, though explicit security policies and incident response details are not publicly available. The absence of WHOIS data slightly reduces trust but is mitigated by strong branding and operational indicators. Overall, the site is well-maintained, secure, and compliant with privacy standards.

RetailZoom is a data analytics and insights company offering a range of services including data science, customer relationship management, business intelligence, marketing communication channels, shopper and consumer insights, and retail insights. The company targets businesses across multiple industries such as FMCG, manufacturing, healthcare, cosmetics, marketing, and iGaming & sports. Founded in 2010, RetailZoom has a medium-sized presence with a professional and consistent brand image. The website is built using modern technologies like React and Tailwind CSS, hosted on Site5, and integrates advanced analytics tools such as R and Python in its tech stack. The site is mobile optimized and provides a good user experience with clear navigation and relevant content.

APPLiA Italia is a prominent Italian industry association representing over 120 companies in the domestic and professional appliance manufacturing sector. The association is a member of Confindustria and focuses on advocacy, regulatory support, and promoting energy efficiency and sustainability within the industry. Their website reflects a well-established organization with comprehensive content, clear navigation, and a professional design tailored to their target audience of manufacturers and industry stakeholders. The site offers detailed information on services, specialist groups, and industry news, supporting their role as a sector leader. Technically, the website employs modern web technologies including jQuery, Bootstrap 4, and various UI enhancement libraries. It is mobile-optimized and uses HTTPS with a good SSL configuration. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, indicating a mature approach to privacy compliance. However, explicit security policies and incident response information are not present, which could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy of the domain and its alignment with the business claims. External links to partner organizations and social media are well integrated, enhancing trust and connectivity. Overall, APPLiA Italia's website demonstrates a strong business presence with good technical implementation and privacy compliance. Strategic improvements in security policy transparency and accessibility could further enhance their digital maturity and stakeholder trust.

Adima AS operates as a specialized staffing and recruitment agency focusing on industrial manpower, particularly serving the energy, oil & gas, and manufacturing sectors in Norway. The company maintains a confidential CV database for job seekers and offers personnel leasing and recruitment services to industrial clients. Their market position is strong, supported by certifications such as Achilles StartBANK and memberships in industry organizations like Norsk Industri and Blue Maritime Cluster. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the website is built on WordPress using popular plugins and frameworks such as WPBakery Page Builder, Slider Revolution, and Contact Form 7. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the site enforces HTTPS and uses secure external portals for user login and registration, but lacks important security headers and visible privacy or cookie policies, which are critical for compliance and trust. Overall, the security posture is adequate but could be enhanced by implementing recommended headers, privacy notices, and vulnerability disclosure mechanisms. The absence of WHOIS data limits domain legitimacy verification, which slightly impacts trustworthiness. Strategic improvements in privacy compliance and security best practices would strengthen the company's digital maturity and user trust.

IFCON UAB is a Lithuanian financial consulting firm specializing in investment, capital raising, financial advisory, business planning, and operational audits. The company targets businesses and investors seeking tailored investment solutions and financial consulting services. The website presents a professional image with clear contact details and social media presence, supporting its market position as a niche financial advisory provider. Technically, the site is built on WordPress using common libraries such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

eTransport is a Lithuanian-based taxi booking platform offering transportation services primarily targeting local users. The website promotes a taxi revolution with mobile app availability for iOS and Android, indicating a modern approach to urban mobility. The platform provides key services such as taxi booking, driver profiles, and credit purchase for rides, positioning itself as a local competitor in the transportation sector. Technically, the website leverages modern frontend technologies including Google Analytics, Google Tag Manager, OpenLayers for mapping, and is hosted on Amazon Elastic Beanstalk, reflecting a moderate level of digital maturity. The site is mobile responsive with good user experience and navigation clarity. Security posture is adequate with HTTPS usage and no visible exposed sensitive data; however, the absence of security headers and explicit privacy or cookie policies indicates room for improvement. WHOIS data was unavailable due to query limits, limiting domain legitimacy assessment. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

Nortus is a Brazilian company specializing in contemporary solutions for human and organizational development. Their offerings include training programs, diagnostics, consulting, and educational products, supported by proprietary methodologies such as TFEO and TCM. The website reflects a professional and consistent brand presence targeting organizations seeking to enhance leadership and management capabilities. Technically, the site is built on WordPress with Elementor and uses modern plugins and tracking tools, hosted with Cloudflare DNS for performance and security. Security posture is good with HTTPS enforced, though security headers and privacy policies are lacking. The absence of explicit contact information and privacy compliance elements suggests areas for improvement. Overall, Nortus presents a credible and professional digital presence with moderate technical maturity and room for enhanced privacy and security practices.