Security Directory

U

UAB „Bendras finansavimas”

gosavy.com

59

gosavy.com operates as a Lithuanian peer-to-peer lending platform under the company UAB „Bendras finansavimas”. The platform connects borrowers and investors, offering consumer loans, refinancing options, business loans, and real estate financing. It is regulated by the Lithuanian central bank and has established a credible market position with recognitions such as the Gazelė 2022 award. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content primarily in Lithuanian with English alternatives. The technical infrastructure is based on WordPress CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Omnisend. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Contact information is clearly provided with company emails, phone number, and physical address. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, gosavy.com presents a trustworthy and professional online presence in the finance sector.

Cosmos Construction Ltd. operates a professional website focused on metal constructions engineering and production, primarily serving industrial, commercial, and residential sectors in Lithuania. The company offers a broad range of steel products and engineering services, positioning itself as a leading player in the Lithuanian metal construction industry. The website content is well-structured, visually professional, and provides clear information about key services and projects, targeting clients requiring durable and engineered steel solutions. Technically, the website employs a modern but somewhat traditional tech stack including jQuery, FlexSlider, and Google Analytics, with responsive design frameworks like Skel. While the site is accessible and uses HTTPS, it lacks advanced security headers and comprehensive privacy or cookie policies, indicating room for improvement in compliance and security posture. Analytics usage is moderate, relying on Google services without explicit user consent mechanisms visible. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the HTML content. However, the absence of privacy policies, security headers, and contact information for incident response or data protection officers suggests gaps in security best practices and regulatory compliance. The WHOIS data is unavailable due to query limits, but no suspicious indicators arise from the site content itself. Overall, the website presents a credible and professional business front with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory alignment.

L

Lei Agência

lei.com.pt

32

Lei Agência is a Portuguese company specializing in supporting the management of Small and Medium Enterprises (SMEs) since 1977. The company offers a range of services including accounting and auditing, management consulting, insurance mediation, and travel and tourism. It operates as a family-run business with a consolidated structure and an experienced team, aiming to maximize clients' time and focus on their core business. The website is professionally designed using WordPress with the Kadence theme and includes multilingual support and cookie consent mechanisms. Technical infrastructure is modern and performance is moderate with good mobile optimization. Security posture is strong with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Privacy compliance is good with a clear privacy policy and GDPR adherence. Business credibility is supported by client testimonials and a consistent brand presence. No critical security issues or WAF blocking were detected, and the domain registration details align well with the business claims, indicating legitimacy.

Metalface operates as a specialized online networking platform dedicated to the metal recycling industry, facilitating connections among over 20,000 companies. It offers verified company profiles, private networking capabilities, real-time market news, price tracking, and private messaging, positioning itself as a niche leader in this sector. The platform is free to use and targets metal recycling professionals and companies primarily in the Netherlands and Europe. The business has a long-standing presence since 2004, supported by consistent domain registration data and a professional web presence. Technically, Metalface employs a modern React and Redux-based tech stack, integrating third-party services such as Google Analytics, OneSignal for push notifications, and Google Maps API for location services. The site uses Bootstrap for responsive design and slick carousel for UI components, indicating a mature and well-maintained infrastructure. Hosting and domain registration are managed via Amazon Registrar and AWS DNS, ensuring reliable uptime and scalability. From a security perspective, the website enforces HTTPS and domain registration protections like clientDeleteProhibited status. However, DNSSEC is not enabled, and no advanced security headers were detected, which could be improved. The absence of a cookie consent mechanism and explicit GDPR compliance indicators suggests partial privacy compliance. No incident response or security policy information is publicly available, which could be a gap in transparency. Overall, Metalface presents a credible and professional platform with good technical implementation and business credibility. To enhance trust and compliance, it should address privacy consent, enable DNSSEC, and publish security policies. These improvements would strengthen its security posture and regulatory alignment, supporting its continued growth and market leadership.

U

UAB „Acrylicon Baltic“

acrylicon.lt

43

UAB „Acrylicon Baltic“ operates a professional website offering industrial resin flooring solutions primarily targeting commercial and industrial sectors such as food production, hospitality, automotive services, engineering, retail, and healthcare. The company emphasizes durable, hygienic, and environmentally friendly flooring products with quick installation times and long-term cost savings. The website demonstrates a solid market position with multiple certifications and partnerships with notable clients, reflecting a credible and established business presence in Lithuania. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, integrating Google Analytics and Mailchimp for marketing and analytics purposes. The site is mobile-optimized, SEO-friendly, and uses HTTPS, ensuring secure communication. However, some security best practices such as security headers and explicit incident response policies are missing, representing areas for improvement. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. The lack of WHOIS data due to query limits and privacy protection slightly reduces transparency but does not detract significantly from the overall trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, supporting the company’s business objectives and customer engagement effectively.

The website www.pontem.lt is currently a parked domain page managed by the domain registrar Netim. It primarily serves as a placeholder with promotional content directing visitors to Netim's domain registration and web hosting services. There is no active business presence or unique content on the site. The technical infrastructure is minimal, relying on basic HTML and CSS with Google Fonts integration. No CMS or advanced frameworks are detected. Security posture is weak due to lack of HTTPS enforcement and absence of security headers. Privacy and compliance policies are missing, and no contact or company information is provided, limiting trust and credibility. Overall, the site functions as a parked domain with no operational business activities.

The website racinghorses.eu is currently inaccessible due to a security challenge page implementing a proof-of-work CAPTCHA mechanism. This indicates the presence of a Web Application Firewall or similar security control blocking direct access to the site's content. The WHOIS data shows the domain is registered to Kauno technologijos universitetas, an academic institution, which does not align with the domain name or expected business content. No business descriptions, contact information, or privacy policies are available on the page, limiting the ability to assess the business or compliance posture. Technically, the site uses JavaScript with cryptographic functions and is hosted behind AWS Cloudfront CDN. However, no security headers or HTTPS details are visible in the provided data. Overall, the site appears to be either under protection or misconfigured, resulting in minimal accessible content and low trustworthiness.

M

Modulit

modulit.eu

63

Modulit is a specialized distributor of professional audiovisual (AV) equipment and office business solutions, targeting professional AV integrators and office equipment buyers. The website presents a comprehensive catalog of AV products, including video walls, projectors, conferencing systems, ergonomic office solutions, and professional audio equipment. The business model focuses on distribution and providing value-added services such as product configurators and ProAV training sessions. The company maintains a consistent brand presence with active social media channels on LinkedIn and YouTube. Technically, the website employs a modern technology stack including jQuery, Select2, GDPR consent management via Klaro, and multiple analytics and tracking services such as Google Tag Manager, Snitcher, Lfeeder, and Albacross. The site appears to be built on the CS-Cart platform, offering good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers like Content-Security-Policy and does not publicly disclose privacy policies, terms of service, or incident response procedures. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to privacy protection, which is common but reduces transparency. Overall, the website is professional and functional with moderate security and privacy compliance. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance trust and compliance.

P

Policy Impact Lab

policyimpactlab.com

59

Policy Impact Lab is a consulting and research organization focused on supporting public, private, and third sector organizations in designing, implementing, and evaluating development-oriented policies and programs. Their expertise spans thematic areas such as democracy and human rights, social policy, migration management, development cooperation, and culture/social development. The website presents a professional and well-structured digital presence, leveraging modern web technologies including Webflow, Google Fonts, Google Charts, Google Maps API, and analytics platforms like Piwik PRO and Google Tag Manager. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is generally good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. Contact information and incident response details are not provided, limiting user trust and compliance with privacy regulations. Overall, the website is functional and informative but would benefit from enhanced transparency and compliance documentation.

P

PassCamp

passcamp.com

66

PassCamp is a technology company specializing in integrated password vault solutions designed to protect and control passwords within organizations. Their offerings include a range of password management features such as two-factor authentication, secure password sharing, and enterprise-grade customizable solutions including white label and licensed software. The company targets business customers, particularly medium-sized and larger enterprises seeking scalable and secure password management systems. The website presents a professional and consistent brand image with clear navigation and relevant content focused on their core services. Technically, the website is built using the Hugo static site generator, Bootstrap framework, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The domain is registered with NameCheap and uses Cloudflare DNS services. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security practices include HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and DNSSEC implementation. From a security posture perspective, the site demonstrates good practices such as clientTransferProhibited domain status and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and a vulnerability disclosure policy indicates areas for enhancement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner supporting GDPR compliance. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, PassCamp's website reflects a trustworthy and professional business with a solid technical foundation and a good security baseline. Strategic improvements in DNS security, security headers, and incident response transparency would further strengthen their security posture and trustworthiness.

A

A.SPIRE

spire2030.eu

61

A.SPIRE is a European association dedicated to managing and implementing the SPIRE Public-Private Partnership, focusing on enabling technologies and best practices for a resource-efficient process industry. The website positions A.SPIRE as a key player in the European process industry sustainability and innovation landscape, targeting industry stakeholders, policymakers, and research communities. The business model is that of a non-profit association facilitating partnerships and research roadmaps to achieve climate-neutral and circular industry goals. Technically, the website is built on Drupal 7 with Bootstrap and jQuery, leveraging modern web technologies such as Font Awesome and Google Analytics for tracking. The site is mobile optimized and presents good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. Performance is moderate, with external dependencies on common CDNs. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations like GDPR. However, no explicit security headers or incident response contacts are present, and the use of an older CMS version may pose risks if not properly maintained. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with privacy norms, though it could benefit from enhanced security practices and clearer contact information. The domain WHOIS data is unavailable due to .eu privacy policies, which is typical and not suspicious. The AI score reflects a good balance of content quality, technical implementation, security posture, privacy compliance, and business credibility.

W

Widen legal

ilawfirm.lt

62

Widen legal is an international law firm based in Lithuania, providing high-quality legal services to businesses and private clients. The firm offers a broad range of legal expertise including corporate law, banking and finance, tax, labor law, data protection, and dispute resolution. The website reflects a professional and modern digital presence, built on WordPress with multilingual support and SEO optimization. The technical infrastructure includes Cloudflare DNS and Google Tag Manager, with security features such as HTTPS and reCAPTCHA implemented. While the site has a cookie consent mechanism and privacy policy, it lacks explicit security policies and incident response information. Overall, the website is trustworthy and well-positioned for its market segment.

The website aratag.com currently presents a robot challenge screen that blocks direct access to its content, indicating the presence of a Web Application Firewall (WAF) or similar security mechanism. This challenge uses a CAPTCHA and a JavaScript-based proof-of-work system to verify visitors, which prevents automated access and scraping. Due to this blocking, no meaningful business content, contact information, or policies are accessible for analysis. The domain is registered since 2014 with HOSTINGER operations, UAB, showing a stable registration status but lacks DNSSEC and visible security headers on the served page. The technical infrastructure includes advanced JavaScript for client-side challenge processing but lacks visible HTTPS enforcement or security best practices in the provided content. Overall, the site’s security posture is moderate due to the WAF presence but lacks transparency and compliance indicators. The business credibility and privacy compliance cannot be assessed due to the blocked content.

I

HOME | ITlogas Solutions

itlogas.com

49

The website www.itlogas.com appears to be a minimal Wix-based site with very limited content and no visible business or contact information. The absence of WHOIS registration data raises significant concerns about the domain's legitimacy. Technically, the site uses Wix infrastructure and includes Sentry for error monitoring, but lacks essential security headers and privacy compliance mechanisms. The overall security posture is weak due to missing policies and transparency. This results in a low trust and credibility score, indicating the site is not suitable for professional or commercial use without significant improvements.

A

Asociacija LYDERĖ

lydere.lt

57

Asociacija LYDERĖ is a Lithuanian non-profit association that unites nearly 200 top-level leaders and experts across various fields to promote a society free of gender stereotypes and empower women in leadership roles. The website reflects a professional and consistent brand image, targeting high-level executives and experts interested in gender equality and leadership development. Technically, the site is built on the Webflow CMS platform, utilizing modern web fonts and asynchronous script loading for performance. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are absent, which impacts compliance scores. WHOIS data is unavailable due to query limits, but the domain appears legitimate and privacy protection is typical for such organizations. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and explicit contact/security information.

The website akl.lt serves primarily as a file repository for Baltix GNU/Linux operating system distributions, offering ISO images, changelogs, screenshots, and installation utilities. It targets Linux users interested in the Baltix distribution, particularly those in the Baltic region or educational sectors. The business model appears to be centered around open-source software distribution and community support rather than commercial sales. Technically, the site is hosted on an Nginx server and uses an older version of jQuery (1.12.4). The site is served over HTTP without HTTPS, which is a significant security concern. The design and content are basic, with minimal mobile optimization and accessibility features. There is no CMS detected, and the site lacks modern SEO and performance optimizations. From a security perspective, the absence of HTTPS and security headers exposes users to potential risks such as data interception and clickjacking. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. The lack of contact information and WHOIS data further limits trust and transparency. Overall, the security posture is weak, and the site would benefit from immediate improvements in encryption and policy disclosures. The overall risk assessment is moderate due to the site's niche and non-commercial nature but is hampered by poor security and privacy practices. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving transparency with contact information and WHOIS data.

E

Eversheds Sutherland

eversheds-sutherland.com

78

Eversheds Sutherland is a global law firm with a dedicated Finland site offering a wide range of legal services including banking, finance, corporate law, data privacy, and more. The firm positions itself as a responsible and purpose-led business focused on helping clients, people, and communities thrive. The website demonstrates a professional and consistent brand presence with clear navigation and comprehensive legal and privacy policies. Technically, the site uses modern frameworks such as React and includes analytics via Piwik PRO, though there is a minor WebGL initialization issue on the homepage. Security posture is adequate with HTTPS implied and privacy policies in place, but lacks explicit security headers and published incident response information. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the overall business credibility remains high due to the professional presentation and established brand. Strategic recommendations include enhancing security headers, fixing WebGL errors, and publishing security policies to improve trust and compliance.

G

GM Financial

gmfinancial.com

66

GM Financial is a large finance company specializing in personal and commercial auto loans and lease programs, affiliated with General Motors. The website serves consumers and businesses globally, offering account management, financing applications, and current offers. The digital infrastructure is built on Adobe Experience Manager with modern analytics and tracking technologies, ensuring a professional and responsive user experience. Security measures include HTTPS, reCAPTCHA, session management, and secure forms, though explicit security policies and incident response details are not publicly available. The absence of WHOIS data slightly reduces trust but is mitigated by strong branding and operational indicators. Overall, the site is well-maintained, secure, and compliant with privacy standards.

E

Evernord

evernord.com

44

Evernord is a Lithuanian-based investment banking consultancy established in 2014, operating across Lithuania, Latvia, and Estonia. The company focuses on strategic investment planning with a Scandinavian approach, serving a diversified client base including corporations, financial institutions, and private investors. Their key services encompass wealth management, capital raising, investment funds, securities custody and accounting, real estate projects, and gold investments. The website reflects a professional and consistent brand image, supported by client testimonials and partnerships with reputable financial institutions such as Evli bank and Lietuvos bankas. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie compliance. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and advanced security headers. The domain registration is consistent with the business history, showing no privacy protection or suspicious patterns, enhancing trustworthiness. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be improved. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and transparent policies. The overall risk is low, but strategic recommendations include enhancing DNS security, implementing additional HTTP security headers, publishing a vulnerability disclosure policy, and improving incident response visibility to further strengthen trust and security culture.

UAB Sveikatos ekonomikos centras (SEC) is a Lithuanian private company specializing in health economics, social protection, and related policy research and consultancy. The website provides extensive content including research publications, project descriptions, and training information primarily targeting health sector professionals and policymakers. The company maintains a professional online presence with clear contact details and a LinkedIn profile, supporting its credibility in the local market. Technically, the site is built on WordPress using Oxygen Builder, leveraging modern web fonts and jQuery, with moderate performance and good mobile optimization. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS data due to query limits present compliance and trust gaps. Overall, the security posture is moderate with no critical vulnerabilities detected but improvements are recommended in security headers and compliance documentation. The domain's legitimacy cannot be fully verified due to unavailable WHOIS data, but the website content and structure indicate a legitimate business entity. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, publishing incident response information, and improving WHOIS transparency to strengthen trust and compliance.

Tuwaiq Theme & Design Company appears to be a small design service provider established in 2013, likely based in Japan given the registrar and DNS servers. The website is minimalistic, with very limited content and no visible contact or policy information. Technically, the site uses outdated JavaScript libraries and lacks HTTPS, which poses security risks. The hosting platform is Adobe Business Catalyst, which is deprecated, potentially impacting performance and security. Security posture is weak due to missing HTTPS, lack of security headers, and no privacy or cookie policies. Overall, the site shows low digital maturity and limited compliance with modern security and privacy standards. Strategic improvements are needed to enhance trustworthiness and security.

R

RetailZoom

retailzoom.net

66

RetailZoom is a data analytics and insights company offering a range of services including data science, customer relationship management, business intelligence, marketing communication channels, shopper and consumer insights, and retail insights. The company targets businesses across multiple industries such as FMCG, manufacturing, healthcare, cosmetics, marketing, and iGaming & sports. Founded in 2010, RetailZoom has a medium-sized presence with a professional and consistent brand image. The website is built using modern technologies like React and Tailwind CSS, hosted on Site5, and integrates advanced analytics tools such as R and Python in its tech stack. The site is mobile optimized and provides a good user experience with clear navigation and relevant content.

A

ALLIANCE for recruitment

afr.lt

53

ALLIANCE for recruitment operates as a leading recruitment agency and headhunting service in Lithuania, targeting job seekers and employers with a comprehensive portfolio of job offers from top employers. The website reflects a medium-sized business with a strong market position as the largest recruitment team in the region. Their business model focuses on connecting talent with employers through digital platforms and personalized services. Technically, the website is built on Drupal 7, integrating modern tracking and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR-compliant cookie management. While the CMS is somewhat dated, the site maintains good performance and mobile optimization, ensuring a positive user experience.

A

APPLiA Italia

appliaitalia.it

62

APPLiA Italia is a prominent Italian industry association representing over 120 companies in the domestic and professional appliance manufacturing sector. The association is a member of Confindustria and focuses on advocacy, regulatory support, and promoting energy efficiency and sustainability within the industry. Their website reflects a well-established organization with comprehensive content, clear navigation, and a professional design tailored to their target audience of manufacturers and industry stakeholders. The site offers detailed information on services, specialist groups, and industry news, supporting their role as a sector leader. Technically, the website employs modern web technologies including jQuery, Bootstrap 4, and various UI enhancement libraries. It is mobile-optimized and uses HTTPS with a good SSL configuration. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, indicating a mature approach to privacy compliance. However, explicit security policies and incident response information are not present, which could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy of the domain and its alignment with the business claims. External links to partner organizations and social media are well integrated, enhancing trust and connectivity. Overall, APPLiA Italia's website demonstrates a strong business presence with good technical implementation and privacy compliance. Strategic improvements in security policy transparency and accessibility could further enhance their digital maturity and stakeholder trust.

A

Adima AS

adima.no

63

Adima AS operates as a specialized staffing and recruitment agency focusing on industrial manpower, particularly serving the energy, oil & gas, and manufacturing sectors in Norway. The company maintains a confidential CV database for job seekers and offers personnel leasing and recruitment services to industrial clients. Their market position is strong, supported by certifications such as Achilles StartBANK and memberships in industry organizations like Norsk Industri and Blue Maritime Cluster. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the website is built on WordPress using popular plugins and frameworks such as WPBakery Page Builder, Slider Revolution, and Contact Form 7. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the site enforces HTTPS and uses secure external portals for user login and registration, but lacks important security headers and visible privacy or cookie policies, which are critical for compliance and trust. Overall, the security posture is adequate but could be enhanced by implementing recommended headers, privacy notices, and vulnerability disclosure mechanisms. The absence of WHOIS data limits domain legitimacy verification, which slightly impacts trustworthiness. Strategic improvements in privacy compliance and security best practices would strengthen the company's digital maturity and user trust.

A

Atomic Consulting

atomicon.io

41

Atomic Consulting is a Lithuania-based IT consulting and recruitment firm specializing in sourcing senior IT professionals and providing dedicated teams primarily for banking, fintech, and big data sectors. The company leverages a network of seasoned software experts to deliver tailored IT staffing solutions. Their website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using modern libraries such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. Overall, the domain registration is privacy protected but consistent with the business profile, supporting legitimacy. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

K

Krekenavos agrofirma

krekenavos.lt

45

Krekenavos agrofirma is a well-established Lithuanian meat processing company with nearly 30 years of experience. The company operates a modern meat processing factory compliant with EU standards and offers a variety of meat products and fresh meat. Their business model focuses on manufacturing and distribution within the meat industry, targeting consumers and businesses in Lithuania and potentially broader EU markets. The website reflects a stable and professional business with a significant turnover exceeding 120 million euros in 2020. Technically, the website is built on WordPress using the Avada theme, incorporating modern JavaScript libraries such as jQuery and Slider Revolution. It employs Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in technical optimization. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit privacy or cookie policies. No forms or sensitive data exposure were detected, indicating a reasonable security posture. However, the absence of incident response contacts, security.txt, and vulnerability disclosure policies suggests areas for enhancement in security governance and compliance. Overall, the website is professional and trustworthy, but improvements in privacy compliance, security headers, and transparency around data protection and incident response would strengthen its security posture and regulatory adherence.

I

IFCON UAB

ifcon.lt

53

IFCON UAB is a Lithuanian financial consulting firm specializing in investment, capital raising, financial advisory, business planning, and operational audits. The company targets businesses and investors seeking tailored investment solutions and financial consulting services. The website presents a professional image with clear contact details and social media presence, supporting its market position as a niche financial advisory provider. Technically, the site is built on WordPress using common libraries such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

B'lizzard is a small media production company based in Portugal, specializing in cinema and advertising video production. Their website showcases a diverse portfolio of creative projects including documentaries, commercials, and video installations for various clients. The company targets advertising agencies, cultural institutions, and corporate clients seeking professional media content. Technically, the website is built on WordPress using the Sinatra theme and common plugins such as WPBakery and Google Maps API. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security-wise, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, indicating compliance gaps. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional and functional but could improve in privacy compliance and security best practices.

L

Liviko

liviko.ee

47

Liviko is a well-established and reputable manufacturer and distributor of quality alcoholic beverages in the Baltic region, with a history dating back to 1898. The company operates internationally within Estonia, Latvia, and Lithuania, offering a range of products and services including distillery tours and brand development. The website reflects a professional digital presence built on WordPress, enhanced with SEO and analytics tools, and demonstrates good mobile optimization and user experience. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and incident response policies could be improved. Overall, the website and business present a trustworthy and credible profile with strong branding and clear contact information.

O

Oceaneering

oceaneering.com

58

Oceaneering is an established enterprise providing engineered services and products primarily to the offshore energy industry, with extended expertise in defense, aerospace, logistics, science, and renewable energy sectors. The company positions itself as a problem solver with over 60 years of operational history, targeting industrial clients requiring advanced technological solutions. The website reflects a professional digital presence built on WordPress, leveraging modern web technologies and a consistent branding approach. However, the absence of WHOIS registration data raises concerns about domain registration transparency. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, but lacks comprehensive security headers and explicit privacy or cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration information to improve trustworthiness.

The Indian Paint Association website represents a well-established industry association focused on the paint and coatings sector in India. Founded in 2002, the organization provides membership services, industry news, events, and resources to paint industry professionals and stakeholders. The website content is relevant and structured to support its target audience, though the design and technical implementation are somewhat dated, relying on ASP.NET WebForms and older JavaScript libraries. The site includes member login and feedback forms but lacks modern privacy and security features such as cookie consent and comprehensive privacy policies. Technically, the website uses legacy technologies like jQuery and jCarousel with no visible modern CMS or frameworks. The domain registration is consistent with the organization's identity and location, supporting legitimacy. However, the site lacks DNSSEC, security headers, and explicit HTTPS enforcement visible in the HTML content, which are important for modern security standards. No WAF or blocking mechanisms are detected, and the site is fully accessible. From a security perspective, the site shows moderate maturity but requires improvements in SSL configuration, security headers, and privacy compliance to meet current best practices. The absence of cookie consent and GDPR compliance indicators is a notable gap. Overall, the website is functional and credible but would benefit from modernization and enhanced security and privacy measures.

E

eTransport

etransport.lt

53

eTransport is a Lithuanian-based taxi booking platform offering transportation services primarily targeting local users. The website promotes a taxi revolution with mobile app availability for iOS and Android, indicating a modern approach to urban mobility. The platform provides key services such as taxi booking, driver profiles, and credit purchase for rides, positioning itself as a local competitor in the transportation sector. Technically, the website leverages modern frontend technologies including Google Analytics, Google Tag Manager, OpenLayers for mapping, and is hosted on Amazon Elastic Beanstalk, reflecting a moderate level of digital maturity. The site is mobile responsive with good user experience and navigation clarity. Security posture is adequate with HTTPS usage and no visible exposed sensitive data; however, the absence of security headers and explicit privacy or cookie policies indicates room for improvement. WHOIS data was unavailable due to query limits, limiting domain legitimacy assessment. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

N

Nortus

nortus.com.br

58

Nortus is a Brazilian company specializing in contemporary solutions for human and organizational development. Their offerings include training programs, diagnostics, consulting, and educational products, supported by proprietary methodologies such as TFEO and TCM. The website reflects a professional and consistent brand presence targeting organizations seeking to enhance leadership and management capabilities. Technically, the site is built on WordPress with Elementor and uses modern plugins and tracking tools, hosted with Cloudflare DNS for performance and security. Security posture is good with HTTPS enforced, though security headers and privacy policies are lacking. The absence of explicit contact information and privacy compliance elements suggests areas for improvement. Overall, Nortus presents a credible and professional digital presence with moderate technical maturity and room for enhanced privacy and security practices.

P

pricliadv.com

pricliadv.com

38

The website ww1.pricliadv.com is a parked domain primarily serving advertising content through Google Adsense and Bodis domain parking services. It lacks any substantive business information, contact details, or user engagement features. The domain WHOIS data is unavailable, indicating the domain may be unregistered, expired, or privacy protected with no public data, which raises concerns about legitimacy. Technically, the site uses basic HTML, CSS, and JavaScript with embedded ad scripts but lacks HTTPS and security headers, resulting in a weak security posture. Privacy compliance is minimal with only basic privacy and legal pages present but no cookie consent mechanisms. Overall, the site quality and professionalism are poor, and the risk of trust issues is high.

F

Frogmind

frogmindgames.com

50

Frogmind is an independent game development studio based in Helsinki, Finland, recognized for its award-winning BADLAND series and other successful mobile games. Operating since 2012, Frogmind maintains a strong market position through a strategic partnership with Supercell, which holds a majority stake. The company focuses on small, talented teams to deliver high-quality gaming experiences across multiple platforms. Technically, the website is built on WordPress with common web technologies such as jQuery and Bootstrap, and integrates analytics and social media SDKs. The site is accessible, well-structured, and mobile-optimized, though some security enhancements could be made. Security posture is solid with HTTPS and domain protections, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a professional and credible business with room for security and privacy improvements.

M

Matrix Ship Management Ltd

matrixshipmanagement.com

55

Matrix Ship Management Ltd is a Cyprus-based maritime service provider specializing in comprehensive ship management solutions including crew, technical, hotel services, training, and consultancy. With over 30 years of industry experience, the company positions itself as a flexible and safety-focused partner for vessel owners and operators worldwide. The website reflects a professional and consistent brand image, supported by client testimonials and recognized certifications such as ISM and ISPS codes. Technically, the site employs a modern tech stack with Bootstrap, jQuery, and multiple analytics tools, hosted likely on Microsoft Online infrastructure. Security posture is moderate with HTTPS usage but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is basic with a cookie consent banner and a privacy policy present, though GDPR compliance is not explicitly indicated. Overall, the website is trustworthy and well-structured, suitable for its target maritime audience.

H

Head Aero

headaero.com

60

Head Aero is a specialized aviation company focused on aircraft material trading, repair, leasing, and maintenance services. Established in 2015, the company holds multiple industry certifications including ASA-100, ISO, FAA, and EASA, positioning itself as a reputable global aviation solutions provider. Their service portfolio includes landing gear MRO, aircraft teardown, infrastructure development, and 24/7 AOG support, targeting aviation industry professionals and businesses worldwide. The website reflects a professional and consistent brand image with clear service descriptions and social media presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted with DNS managed by Cloudflare and registered via GoDaddy. The site is moderately performant, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers. The site includes a cookie consent banner indicating some privacy compliance, but lacks explicit privacy and terms of service policies. Security-wise, no critical vulnerabilities or WAF blocking were detected. However, the absence of security headers and vulnerability disclosure policies suggests room for improvement in security best practices. The Google Analytics plugin is installed but not configured, indicating incomplete analytics setup. Overall, the site is trustworthy and credible but could enhance privacy compliance and security transparency. The overall risk is moderate with no immediate critical issues, but strategic improvements in privacy policy publication, security headers, DNSSEC, and incident response documentation are recommended to strengthen trust and compliance.

D

Dema Spa

demaspa.it

63

Dema Spa is an established aerospace engineering company founded in 1993, specializing in the design, industrialization, production, and assembly of complex aerostructures. With a medium-sized workforce and multiple centers of excellence in Italy and Canada, the company holds a strong market position as a world-class supplier in the aerospace transportation sector. Their key services include composites engineering, manufacturing, and research & development, targeting major aerospace manufacturers and system integrators. The website reflects a professional digital presence built on WordPress with multilingual support and SEO optimization. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms, though some security headers could be enhanced. Contact information is clearly provided, supporting business credibility. Overall, the company demonstrates a solid technical infrastructure and a good security posture, with room for improvement in formal security policies and incident response disclosures.

I

Indeform

indeform.com

58

Indeform is a small technology company specializing in interactive technologies, cloud software solutions, artificial intelligence for business, and digital graphics. Their service offerings include cloud computing, AI, computer vision, virtual and augmented reality, and 3D visualizations, targeting businesses seeking innovative digital solutions. The website is professionally designed with clear navigation and good mobile optimization, hosted likely on Amazon AWS infrastructure. The technical stack includes Google Tag Manager and a third-party tracking service (lfeeder), indicating moderate digital maturity. Security posture is moderate with domain registration protections but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. No contact information or incident response details are provided, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

I

Institutt for samfunnsforskning

samfunnsforskning.no

70

Institutt for samfunnsforskning is a Norwegian non-profit research institute specializing in social research topics such as work, media, equality, migration, civil society, elections, democracy, and welfare. The website serves researchers, academics, policymakers, students, and the general public with research projects, publications, events, and newsletters. The institute maintains a professional online presence with consistent branding and comprehensive content. Technically, the site uses the Vortex CMS platform, jQuery, and Google Analytics, hosted likely on University of Oslo infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. WHOIS data is unavailable, which reduces trust in domain legitimacy, but the website content and contact information support its authenticity. Overall, the site is well-maintained and trustworthy with room for security policy enhancements.

S

Starflix

starflix.lt

48

Starflix is a Lithuanian digital marketing agency specializing in handcrafted website development, e-commerce solutions, hosting, and online advertising services. Positioned as a market leader in Vilnius, the company targets businesses seeking tailored digital marketing strategies and web presence. The website demonstrates a professional design with clear navigation and relevant content, supporting their business model effectively. Technically, the site is built on WordPress with popular plugins and modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and explicit cookie consent for GDPR compliance. Overall, the business appears credible with transparent contact information and active social media presence, though WHOIS data is unavailable for full domain legitimacy verification.

The website kvantum.lt is currently under construction and provides minimal information, limited to a contact phone number and email address. The site uses basic frontend technologies such as Bootstrap and jQuery but lacks substantive business content or descriptions. There is no evidence of a privacy policy, cookie policy, or terms of service, which limits its compliance posture. The absence of WHOIS data due to query limits restricts the ability to verify domain registration details and legitimacy. Technically, the site does not demonstrate HTTPS usage or security headers, indicating a weak security posture. Overall, the site appears to be in an early development stage with significant gaps in security, compliance, and business credibility.

F

FOREO

foreo.com

67

FOREO is a Swedish beauty and wellness company specializing in innovative skincare and oral care devices. The company positions itself as a leader in beauty-tech solutions, targeting consumers seeking professional-level personal care products. The website is well-designed, mobile-optimized, and rich in content, showcasing a broad product range and strong brand presence supported by celebrity endorsements and numerous awards. Technically, the site uses Drupal 10 CMS with modern security practices including HTTPS and Google reCAPTCHA, indicating a mature digital infrastructure. However, the absence of publicly available WHOIS data for the domain is unusual for a brand of this size and should be monitored for legitimacy concerns. Privacy and cookie policies are comprehensive and GDPR compliant, but explicit security policy and incident response contacts are not found. Overall, the site demonstrates a strong security posture and business credibility with room for improvement in transparency around security policies and domain registration details.

V

VšĮ „Tarptautinis maratonas“

vilniusmarathon.lt

42

Vilniaus maratonas is a well-established marathon event organizer based in Lithuania, focusing on running events for a broad audience including children and seniors. The website presents a professional and consistent brand image with active social media engagement and event history, positioning itself as a leading sports event in the region. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and tracking implementations, but lacks some security headers and explicit privacy/cookie policies. Overall, the site is legitimate and functional but could improve privacy compliance and security best practices.

C

Codemakers

codemakers.dk

45

Codemakers is a Danish full-service programming company specializing in user-friendly WordPress websites, WooCommerce webshops, and technical support services. Established in 2013, the company has built a solid reputation with a high customer rating and a clear focus on delivering scalable and creative digital solutions. Their website reflects a professional and consistent brand image with clear contact information and a user-friendly design. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. The domain is well-aged and consistent with the business claims, enhancing trustworthiness. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and DNSSEC. There is no visible privacy or cookie policy, which presents compliance risks under GDPR. No incident response or security policy information is published, indicating a gap in transparency and preparedness. Overall, the security posture is moderate but could be significantly improved with better policies and technical controls. The overall risk is moderate with no critical vulnerabilities detected, but compliance and security best practices need attention. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, enabling DNSSEC, and adding incident response contact information to enhance trust and compliance.

S

Saga Furs Oyj

sagafurs.com

65

Saga Furs Oyj operates as a full-service auction house specializing in high-quality fur sourced from strictly regulated European farms. The company positions itself as a leader in the fur auction market with a strong emphasis on sustainability, corporate governance, and innovation through its Creative Hub and digital services. The website reflects a mature business with comprehensive information on auctions, sustainability, and corporate disclosures, targeting industry professionals, designers, and buyers worldwide. Technically, the site is built on WordPress with modern frameworks and plugins, hosted on WP Engine, and optimized for SEO and mobile use. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the detailed corporate information presented. Strategic recommendations include enhancing security headers, publishing an incident response policy, and maintaining up-to-date software to mitigate risks.

The website kbcomponents.com appears to be protected by a security mechanism, likely a Web Application Firewall (WAF) provided by BitNinja.IO, which blocks direct access to the actual website content. The visible page is a security challenge with an automatic redirect and browser integrity checks, preventing full content analysis. The domain is long-established, created in 2001, and registered with Internet Domain Service BS Corp without privacy protection, indicating legitimate ownership. However, the website technology is outdated, using Joomla 1.5 and WordPress 2.5, both unsupported and vulnerable, which poses significant security risks. No privacy, cookie, or terms of service policies are present, and no contact or business information is visible on the page. The site lacks modern SEO, accessibility, and security best practices, resulting in a low trust and professionalism rating.

A

Allive

allive.com

49

Allive is a vertically integrated hemp cultivation and manufacturing company with a strong market presence in Europe and North America. The company specializes in premium hemp products, organic superfoods, and sustainable hemp-based ingredients, serving retailers and health-conscious consumers. Their operations are supported by multiple certifications and a commitment to quality and sustainability. Technically, the website is built on WordPress using modern plugins and SEO tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website reflects a credible and professional business but should improve compliance and security transparency.

The domain mealdeal.lt currently hosts a parked domain placeholder page provided by Hostinger, indicating no active website or business presence. The page contains minimal content, primarily promoting Hostinger's hosting services and providing links to Hostinger resources. The technical infrastructure uses common web libraries such as Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking, but no CMS or business-specific technologies are detected. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. WHOIS data could not be extracted due to query limits, preventing assessment of domain registration legitimacy. Overall, the domain appears inactive and not currently used for business purposes.