Security Directory

S

Sigli

cortlex.com

71

Sigli is a medium-sized software development company founded in 2015, specializing in digital transformation and AI-driven solutions. The company targets mid-market and enterprise clients, offering services such as product development, QA on demand, staff augmentation, and compliance support for regulations like DORA and EUDR. Their market position is strengthened by a strong local presence in Lithuania, Belgium, and the UK, and partnerships with recognized industry players. Technically, the website is built on modern frameworks including React, Angular, .NET, and Java, hosted on Webflow, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which introduces some trust concerns despite the professional presentation and certifications. Overall, Sigli demonstrates a mature digital presence with room for improvement in transparency and domain registration trust.

C

CRAFT bearings JSC

craft-bearings.com

51

CRAFT bearings JSC is a Lithuania-based manufacturer and distributor specializing in industrial, automotive, and agricultural bearings. The company positions itself as a top-quality European bearing factory with extensive stock and global distribution across 90 countries. Their services include manufacturing, quality control via an in-house laboratory, testing, and developed logistics for on-time global delivery. The website is professionally designed with multilingual support and comprehensive downloadable resources, reflecting a mature business model focused on manufacturing and wholesale distribution. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, with frameworks such as fullPage.js and Isotope enhancing user experience. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Performance is moderate, with rich multimedia content including video backgrounds. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, no explicit security headers were detected, and there is no published security or incident response policy. The WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the security posture is good but could be improved by adding security headers and formal policies. The overall risk is moderate; the business appears legitimate and professional, but the lack of WHOIS data and some missing security best practices suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust and compliance.

C

Creston

creston.lt

46

Creston is a Lithuanian real estate company specializing in property brokerage and related services. The website targets local buyers, sellers, and investors, offering services such as property sales, purchase assistance, and career opportunities in real estate. The company maintains a professional online presence with consistent branding and relevant content tailored to its market segment. Technically, the website is built on WordPress using Bootstrap and integrates common analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is secured with HTTPS and employs Google reCAPTCHA to protect forms from abuse. However, there is a lack of explicit privacy and cookie policies, and no visible security headers, which are areas for improvement. The WHOIS data is unavailable due to query limits, but no suspicious indicators are present in the website content, suggesting legitimacy. Overall, the site demonstrates a moderate to good level of digital maturity and security posture.

S

ServiceNet

servicenet.org

57

ServiceNet is a Massachusetts-based non-profit organization specializing in mental health and human services. The website presents a professional and well-structured digital presence, targeting individuals and families seeking community support and healthcare services. The organization appears established in its sector, offering a range of key services aligned with its mission. Technically, the website is built on WordPress, utilizing common plugins such as WP Rocket for performance optimization and Rank Math PRO for SEO enhancements. The site demonstrates good mobile optimization and user experience, though performance is moderate and accessibility features are basic. No advanced hosting or security infrastructure details are evident from the content. From a security perspective, the site lacks visible security headers and explicit SSL configuration details, which suggests room for improvement in hardening the web presence. The absence of privacy, cookie, and terms of service policies indicates potential compliance gaps, especially regarding GDPR and data protection regulations. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency and trustworthiness from a domain registration standpoint. Overall, the website is functional and credible for its business purpose but would benefit from enhanced security practices, privacy compliance measures, and improved transparency in domain registration information.

M

Multisport

multisportbv.nl

43

Multisport is a Dutch sports and fitness service provider with a website primarily targeting Dutch-speaking customers interested in gym and multisport memberships. The company has been established since 2004, indicating a stable presence in the market. The website is built on WordPress, utilizing common plugins such as Yoast SEO and WP Rocket for optimization. The technical infrastructure is moderate in performance and mobile optimization, with a hosting provider identified as team.blue nl B.V. Security posture is basic, with no detected security headers or explicit security policies, and no privacy or cookie policies found, which indicates room for improvement in compliance and security best practices. No contact emails or phone numbers were explicitly found in the provided content, limiting direct communication channels. Overall, the website is accessible and functional but lacks comprehensive privacy and security documentation.

The website hertel.com is currently deactivated and displays only a minimal message directing users to contact support via email at [email protected]. There is no accessible business content, metadata, or structured data available to analyze. The domain is registered since 1996 with CSC Corporate Domains, Inc., indicating a longstanding registration, but the website itself is inactive. Technical infrastructure details are limited, with no detected CMS, frameworks, or security headers. The lack of HTTPS information and security policies suggests a poor security posture. Overall, the site is not operational, which severely limits any meaningful security, compliance, or business analysis.

A

Apvalaus Kvadrato Mokykla

akmokykla.lt

55

Apvalaus Kvadrato Mokykla is a small private school located in Vilnius, Lithuania, offering full-day education from pre-kindergarten through primary and lower secondary levels. The school emphasizes emotional and physical safety, individual development, and self-regulated learning in small groups. Their business model focuses on providing a nurturing educational environment with additional activities such as clubs and seasonal camps. Technically, the website is built on WordPress using Elementor and integrates modern tools like Google Tag Manager and Facebook Pixel for analytics and marketing. The site is well-structured, mobile-optimized, and includes a comprehensive cookie consent mechanism, though explicit privacy and terms of service pages are missing. Security posture is good with HTTPS enforced but lacks some security headers and explicit policies. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this business type. Overall, the site presents a professional and trustworthy image suitable for its target audience.

1

1stDibs

1stdibs.com

63

1stDibs is a premier online marketplace specializing in luxury vintage, antique, and contemporary furniture, jewelry, art, watches, and fashion. Founded in 2000 by Michael Bruno, it connects discerning buyers with vetted professional sellers worldwide, offering global shipping and guarantees such as authenticity and money-back. The platform is well-established with a strong market position in the luxury e-commerce sector. Technically, the website employs modern web technologies including React, GraphQL, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Pepperjam. The site is performant, mobile-optimized, and accessible, providing an excellent user experience. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers and incident response policies could be more transparent. The absence of public WHOIS data reduces domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business maturity. Strategic recommendations include enhancing security header visibility, publishing incident response contacts, and considering a security.txt file to improve vulnerability disclosure transparency.

A

Aquila Racing

aquilaracingcars.com

49

Aquila Racing is a small Danish company specializing in the design and manufacture of racing cars, targeting motorsport enthusiasts and racing teams. Their website presents a professional image with a focus on their key products such as the Synergy, Adamo, and CR1 Sports GT racing cars. The technical infrastructure is based on WordPress with common plugins for SEO and analytics, indicating a moderate level of digital maturity. The site is HTTPS secured and includes cookie consent mechanisms, but lacks visible privacy policies and security headers, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, impacting the overall risk profile. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and incident response policies, and clarifying domain registration status to improve trust and compliance.

S

Saldo Redovisning

saldoredo.se

62

Saldo Redovisning is a Stockholm-based accounting firm that combines the latest digital accounting technologies with personalized expert advisory services. The website targets business owners and organizations seeking modern and expert-driven accounting solutions. The firm positions itself as a digitally advanced yet personal accounting service provider in the local market. Technically, the website is built on the Webflow platform and integrates multiple modern tools such as Google reCAPTCHA, Google Tag Manager, Hotjar, Pipedrive, and Cookiebot for consent management, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms and bot protection, but lacks some advanced security headers and explicit security policies. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, possibly due to subdomain usage or registration anomalies. Overall, the website is professional, privacy-conscious, and technically sound but would benefit from clearer contact information and enhanced security disclosures.

U

UAB „Plasteksus”

plasteksus.eu

45

UAB „Plasteksus” is a medium-sized manufacturing company based in Lithuania, specializing in the design and production of plastic packaging, including PET, PP, and PE materials. It holds a strong market position as one of the largest plastic packaging designers and manufacturers in the Baltic region, serving industries such as food, beverages, personal hygiene, household chemicals, and chemical production. The company also provides consultancy services in packaging design and technical parameter selection. The website reflects a professional and consistent brand image, with clear contact information and subsidiary company links, indicating a well-structured business ecosystem. Technically, the website is built on WordPress 6.5.5, utilizing modern plugins such as Slider Revolution and Contact Form 7, with jQuery libraries for enhanced interactivity. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, HTTPS is enforced, but the absence of explicit security headers and incident response policies suggests moderate security maturity. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates good privacy compliance with GDPR, including a cookie consent mechanism and a privacy policy page. However, the lack of WHOIS data due to privacy protection slightly reduces transparency. There are no signs of WAF or content blocking, allowing full content accessibility. The business credibility is supported by clear contact details and professional content, though the absence of terms of service and security policies could be addressed. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, improving accessibility features, and maintaining up-to-date technical components to ensure ongoing security and compliance.

M

Media Partner

mediapartner.lt

46

Media Partner is a Lithuanian digital marketing agency specializing in performance marketing, social media management, graphic design, and SEO services. The company positions itself as a growth partner for businesses, emphasizing partnership, creativity, and measurable results. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. The presence of client testimonials and a portfolio enhances their credibility in the market. Technically, the website uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Google Analytics with a cookie consent mechanism, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and JWT-based payment widget integration, though some security headers are missing. Overall, the site demonstrates good privacy compliance with GDPR-aligned policies and cookie consent. The WHOIS data is unavailable due to query limits, but the domain appears privacy protected, which is reasonable for this business type. The overall risk is low, with recommendations to improve security headers and publish explicit security policies.

T

Three Cubes

tryskubai.lt

65

Three Cubes is an educational company specializing in creating scalable Minecraft-based lessons for schools, teachers, and after-school activities. The company leverages the immersive Minecraft: Education Edition platform to deliver gamified learning experiences that engage students and enhance educational outcomes. Recognized nationally and in Europe for its innovative approach, Three Cubes serves a growing community of over 30,000 students and 300 schools, positioning itself as a niche leader in game-based education within Lithuania. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to educators and institutions. Technically, the website employs modern JavaScript libraries such as Splide.js for UI components and integrates marketing and analytics tools including Google Analytics and MailerLite. Hosted by HOSTINGER operations, UAB, the site uses HTTPS but lacks advanced DNS security features like DNSSEC and some recommended security headers, indicating room for improvement in security hardening. The site is mobile-optimized and SEO-friendly, contributing to a positive user experience. From a security perspective, the site implements GDPR-compliant cookie consent mechanisms and maintains privacy and cookie policies, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent and legitimate, with no suspicious patterns. Overall, the security posture is moderate but could be enhanced by adding DNSSEC, security headers, and a vulnerability disclosure policy. The overall risk assessment is low with no critical issues detected. Strategic recommendations include improving DNS security, enhancing HTTP security headers, publishing a security policy, and expanding accessibility features to strengthen compliance and trust. These steps will support the company’s growth and reinforce its reputation as a secure and trustworthy educational service provider.

3

3plogistics

3pleuro.com

40

3plogistics is a Denmark-based third-party logistics provider specializing in comprehensive freight and warehouse services including seafreight, airfreight, roadfreight, project logistics, and rail logistics. The company positions itself as a reliable partner dedicated to going the extra mile for clients, partners, and employees. Their market presence is supported by multiple related domains and a professional website showcasing their service portfolio and regional offices. Technically, the website is built on WordPress with modern frameworks and plugins, offering good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and security headers. WHOIS data is unavailable, which slightly impacts trust but does not negate the professional presentation and operational transparency evident on the site. Overall, the company demonstrates a mature digital presence suitable for its industry and target audience.

V

VaultSpeed

vaultspeed.com

63

VaultSpeed is a technology company founded in 2019, specializing in data product automation platforms aimed at enterprise clients. Their platform supports advanced analytics and GenAI initiatives, positioning them as a leader in scalable data delivery solutions. The website reflects a professional and modern digital presence with a focus on B2B services in the technology sector. Technically, the site leverages modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, and is likely powered by Craft CMS. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and domain transfer protections, but lacks explicit security policies and some security headers. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

A

AB Pieno žvaigždės

pienozvaigzdes.lt

56

AB Pieno žvaigždės is a large Lithuanian dairy company specializing in the production and retail of natural dairy products. Positioned as one of the largest and most modern dairy processors in the Baltic region, the company targets consumers primarily in Lithuania and neighboring Baltic countries. Their business model includes both consumer retail and B2B ingredient solutions. The website reflects a professional and consistent brand presence with clear business and contact information, supporting their market position. Technically, the website is built on the PrestaShop CMS platform and uses common web technologies such as jQuery, Google Analytics, and YouTube APIs. The site is mobile-optimized with good SEO practices and moderate performance. Privacy and cookie policies are implemented with user consent mechanisms, indicating a mature approach to data protection compliance. From a security perspective, the site enforces HTTPS and shows no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy or incident response information and could improve by adding security headers and a vulnerability disclosure policy. The absence of WHOIS data limits domain registration verification, but the website content and business details appear legitimate and consistent. Overall, the website demonstrates a solid digital presence with good security and privacy practices, though improvements in transparency around security policies and domain registration details would enhance trust and compliance.

O

Ober Haus

ober-haus.com

47

Ober Haus is a regional real estate services company operating primarily in the Baltic states of Lithuania, Latvia, and Estonia. The company offers a broad range of services including property and business valuation, residential and commercial real estate brokerage, market research, and property management. Their market position is that of an established and professional real estate service provider with localized presence in key Baltic cities. Technically, the website is built on WordPress with a modern plugin stack including Yoast SEO, WPML for multilingual support, and Contact Form 7 with Google reCAPTCHA for secure user interactions. The site is well-structured, mobile-optimized, and includes privacy and cookie policies with consent mechanisms, indicating a good level of digital maturity and privacy compliance. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS registration data is a notable concern for domain legitimacy, but the professional content and contact information mitigate some risk. Overall, the website presents a trustworthy and professional front for Ober Haus's real estate business.

The website lkka.lt is currently inaccessible in a functional manner, displaying a database connection error page with no business content or contact information. This indicates the site is either down or improperly configured, preventing any meaningful user interaction or business communication. The lack of WHOIS data due to query limits further complicates verification of domain ownership and legitimacy. Technically, the site lacks any detectable technologies, security headers, or HTTPS information, resulting in a very weak security posture. No privacy or cookie policies are present, indicating non-compliance with common data protection regulations. Overall, the site presents a high risk for users and lacks trust signals necessary for business credibility.

W

Weightmans

weightmans.com

72

Weightmans is a leading UK law firm offering a broad range of legal services to businesses and individuals. The firm positions itself as a rapidly growing entity with a global reach, focusing on client and employee satisfaction. Their website reflects a professional and comprehensive presentation of their services, sectors, and products, targeting a diverse audience including commercial clients and private individuals. The firm operates primarily within the UK legal market, serving sectors such as healthcare, insurance, real estate, and regulatory law. Technically, the website employs modern web technologies including Google Tag Manager and Plausible Analytics for tracking, Google Fonts for typography, and implements strong security measures such as HTTPS and multiple security headers. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a publicly available security policy or incident response information is a gap. The WHOIS data is missing, which raises questions about domain registration transparency, though the website's professional quality mitigates some concerns. Overall, the website is trustworthy and professional, but verifying domain registration details and publishing security policies would enhance trust and compliance posture.

S

Sirin

sirin.eu

59

Sirin is a prominent real estate developer specializing in sustainable logistics parks in the Baltic region, positioning itself as one of the largest players in this niche market. The company emphasizes energy efficiency and sustainability, having developed over 600,000 square meters of modern logistics real estate. The website reflects a professional digital presence built on WordPress, incorporating modern SEO and marketing tools such as Yoast SEO, Google Tag Manager, and Omnisend. Cookie consent is managed through Cookiebot, indicating attention to privacy compliance, although explicit privacy and terms of service documents are not readily found. Security posture is strong with HTTPS enabled and no evident vulnerabilities, but the absence of security headers and incident response contacts suggests room for improvement. Overall, the website is well-designed, mobile-optimized, and provides a good user experience, supporting the company's credibility and market position.

I

Inlusion Netforms

inlu.net

47

Inlusion Netforms is a specialized provider of virtual reality solutions targeting multiple industries such as education, manufacturing, healthcare, and media. Their offerings include VR simulators, 360 VR videos, 3D scanning, and custom VR machines, positioning them as a niche player in the VR technology market. The website demonstrates a professional design with clear navigation and multilingual support, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with common libraries and plugins, delivering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC, and no published security or incident response policies. Privacy compliance is addressed with a privacy policy and cookie consent banner, though GDPR compliance is not explicitly confirmed. Overall, the website reflects a legitimate small business with room for improvement in security and privacy transparency.

Gencs Valters Law Firm is a small, regionally focused legal and tax consultancy firm operating primarily in the Baltic states of Latvia, Lithuania, and Estonia. The firm offers a broad range of services including corporate finance, company registration, tax services, immigration and residency, mergers and acquisitions, debt recovery, and intellectual property registrations such as patents and trademarks. The website content is professionally presented with a consistent brand image and clear navigation, targeting businesses and individuals seeking legal expertise in the Baltic region. The firm demonstrates trust through client references and social media presence. Technically, the website uses legacy technologies such as jQuery 1.7.2 and Google Analytics for tracking. The site lacks modern security headers and does not explicitly use HTTPS based on the provided base URL, which impacts its security posture. Mobile optimization and accessibility are basic but functional. SEO practices are present but could be improved. The site collects user emails via a contact form but lacks visible privacy or cookie policies, indicating compliance gaps with GDPR. From a security perspective, the absence of HTTPS and security headers, along with the use of outdated JavaScript libraries, presents vulnerabilities. No incident response or security policies are published. The WHOIS data is consistent with the business claims, registered through a Latvian registrar, supporting legitimacy. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website is credible and professional but requires significant improvements in security and privacy compliance to meet modern standards. Strategic enhancements in HTTPS deployment, security headers, updated libraries, and GDPR compliance will strengthen trust and reduce risk.

The website btb.az is currently inaccessible due to a Cloudflare security block page preventing access. This indicates the site is protected by a Web Application Firewall (WAF) which has triggered a block based on detected suspicious activity or security rules. Due to this block, no actual business content, contact information, or policies are available for analysis. The technical infrastructure appears to rely on Cloudflare for security and hosting protection, but no further details on CMS, frameworks, or technologies can be determined. The security posture cannot be fully assessed beyond the presence of Cloudflare's WAF. Overall, the site is currently not accessible for normal users, which severely limits any meaningful security, compliance, or business analysis.

C

Comic Con Baltics

ccbaltics.com

59

Comic Con Baltics is a prominent popular culture event organizer based in Lithuania, hosting large-scale conventions in the Baltic States since 2017. The website serves as the primary digital platform for event information, ticket sales, guest announcements, and schedules, targeting pop culture enthusiasts and cosplay fans in the region. The business model revolves around event management and community engagement through various activities and partnerships. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates marketing and analytics tools such as Google Tag Manager and MailerLite. While the site is generally well-structured and optimized for SEO and mobile devices, minor backend issues such as PHP warnings are present. Security posture is adequate with HTTPS enabled but lacks advanced DNSSEC and published security policies. Overall, the domain registration and website content align well, indicating a legitimate and established business presence.

TORUS SOLUTIONS operates as a small-sized business specializing in providing ERP and business process solutions primarily for retail, manufacturing, and distribution sectors within the Baltic region. Their website highlights Microsoft Dynamics 365 for Finance and Operations implementations and showcases several regional projects, indicating a focus on B2B consulting and software services. The technical infrastructure is based on an outdated WordPress CMS with legacy JavaScript libraries, which may pose security and performance challenges. While HTTPS is enforced, the absence of modern security headers and the use of deprecated software versions expose the site to potential vulnerabilities. The lack of privacy and cookie policies, combined with missing WHOIS domain registration data, raises concerns about compliance and legitimacy. Overall, the website presents basic business information and contact channels but requires significant modernization and security improvements to enhance trust and compliance.

L

Lietuvos futbolo federacija

lff.lt

60

Lietuvos futbolo federacija (LFF) is the official national governing body for football in Lithuania, responsible for organizing football leagues, national teams, coaching education, and community engagement. The website serves as a comprehensive portal for football-related activities, including esports and training programs, targeting players, coaches, fans, and sports organizations within Lithuania. The digital infrastructure is built on WordPress with modern plugins and integrations, supporting a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain registration insights, but the website's professional presentation and partner links indicate legitimacy. Overall, the site reflects a mature digital presence aligned with its role as a national sports federation.

N

Novian Group

algoritmusistemos.lt

64

Novian Group is a well-established IT services company operating primarily in Lithuania and the Baltic region, with over 30 years of experience. The company offers a broad range of IT solutions including software development, digitalization, and IT infrastructure management, targeting businesses and public sector organizations. Their market position is strengthened by multiple subsidiaries and international project experience. Technically, the website is built on WordPress with modern plugins and analytics tools, demonstrating good digital maturity and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Privacy compliance is strong with a comprehensive cookie policy and GDPR adherence. However, the lack of WHOIS data limits domain trust verification. Overall, the website is professional, user-friendly, and trustworthy, supporting Novian's business credibility.

The website slimail.com/construction currently serves as an under construction placeholder page for the brand 'sliMail'. The domain is well aged, registered since 2006 with GoDaddy.com, LLC, indicating a potentially established business entity. However, the website content is minimal, lacking any business descriptions, contact information, or user engagement features. The site uses standard front-end libraries such as Bootstrap 4.5.2, jQuery 3.5.1 slim, and Popper.js, loaded from reputable CDNs, indicating a basic technical setup but no advanced infrastructure or CMS detected. Security posture is weak due to absence of HTTPS information, no DNSSEC, and no security headers present in the provided data. Privacy and cookie policies are missing, and no contact or incident response information is available, which limits compliance and trust. Overall, the site is not currently suitable for business operations or customer engagement and requires significant development and security improvements.

I

INTERAUTOMATIKA UAB

interautomatika.lt

44

Interautomatika UAB is a Lithuanian company specializing in the supply of industrial automation components and solutions. The company offers a wide range of products including sensors for temperature, pressure, level, and flow measurement, as well as equipment for liquid and gas analysis. Positioned as a professional B2B supplier, Interautomatika serves industrial clients with competitive pricing and customized automation solutions. The website reflects a mature digital presence with multilingual support and clear business information. Technically, the site is built on Magento CMS with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics integrations. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS registrant data is due to EURid privacy policies and does not detract from the site's legitimacy. Overall, the company demonstrates a professional and trustworthy online presence suitable for its industrial market segment.

U

UAB "Dagos technologijos"

dagos.lt

42

UAB "Dagos technologijos" is a Lithuanian technology company specializing in warehouse management software and ERP integrations. The company offers innovative solutions designed for small to large warehouses, focusing on process optimization, employee productivity, and seamless integration with accounting and e-commerce systems. With over 15 years of experience and a client base of approximately 50 companies, Dagos positions itself as a reliable provider of modern warehouse management technologies. The website reflects a professional and consistent brand image, targeting businesses seeking efficient warehouse and inventory management solutions. Technically, the website employs modern frontend technologies such as Livewire and Alpine.js, combined with Tailwind CSS for styling. The site is mobile-optimized and features good SEO practices including meta tags and Open Graph data. However, some technical aspects such as hosting provider and CMS are not explicitly identified. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS and includes CSRF tokens for form security, but lacks visible security headers and explicit security policies. Privacy compliance is partially addressed with a linked privacy policy, though cookie consent mechanisms are absent. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust. Overall, the website is functional, professional, and credible for its business scope, but could benefit from enhanced security practices and privacy compliance features to strengthen its risk posture and user trust.

I

InfoEra

infoera.com

44

InfoEra is a Baltic-region IT engineering and software solutions provider with over two decades of experience. The company offers integrated hardware and software solutions, software development, training, and support services. It holds authorized partnerships with major software vendors such as Autodesk and operates offices in Lithuania, Latvia, and Estonia. The website reflects a professional and consistent brand presence targeting specialized IT markets in the Baltic states. Technically, the site is built on WordPress with common plugins and includes Google Analytics and reCAPTCHA for security and analytics. Security posture is moderate with HTTPS enabled and reCAPTCHA on forms, but lacks DNSSEC and security headers. Privacy compliance is basic with a cookie consent banner but no privacy policy page. Contact information is comprehensive and transparent, supporting business credibility. Overall, the site is functional and professional but could improve in privacy and security practices.

G

Galio group

galio.lt

59

Galio group is a real estate development company focused on delivering new apartments and office spaces primarily in Vilnius, Lithuania, and also operating in Latvia. The company positions itself as a leading developer of business centers in the Baltic region, emphasizing quality, sustainability, and innovative living and working spaces. Their website reflects a mature digital presence with comprehensive project information, news updates, and a strong emphasis on sustainability certifications such as BREEAM. Technically, the site is built on WordPress with modern tracking and analytics tools including Google Analytics, Facebook Pixel, Hotjar, and Adform, indicating a data-driven approach to user engagement and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification but the professional presentation and detailed content suggest a legitimate and established business. Overall, the website is well-optimized for SEO, mobile-friendly, and provides clear contact information, supporting a positive user experience and business credibility.

S

SwO.lt

swo.lt

43

SwO.lt is a Lithuanian-based online magazine specializing in fashion, art, music, and cultural lifestyle content. It targets a niche audience interested in contemporary style and cultural trends, offering articles, digital magazine issues, and newsletters. The website is built on WordPress and integrates common web technologies such as jQuery, Nivo Slider, and social media SDKs. It maintains a moderate digital maturity with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some outdated JavaScript libraries and missing security headers suggest room for improvement. The absence of WHOIS data limits full domain legitimacy verification, but the site shows no suspicious indicators and maintains consistent branding and contact information. Overall, SwO.lt presents as a credible small media business with a focus on cultural content.

U

Unit Corporation

unitcorp.com

53

Unit Corporation is a well-established energy company specializing in oil and natural gas exploration and production. The company has a long history dating back to 1996, reflected in the domain registration data. The website is built on WordPress using the Divi theme, indicating a standard corporate web presence. However, the website content is basic with limited visible contact or policy information, which may impact user trust and compliance. Technically, the site uses common web technologies but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, the security posture is basic, and improvements are needed in privacy compliance and security best practices to strengthen trust and regulatory adherence.

B

Better Day

betterdayhealth.com

45

Better Day is a healthcare technology company specializing in providing an all-in-one medical management platform that includes electronic health records (EHR), practice management software, revenue cycle management, and specialty-specific consultations. The company targets healthcare providers, practice managers, and patients, aiming to simplify workflows and improve clinical and administrative efficiency. The website reflects a small-sized, niche provider with a consistent brand and good content quality, supported by customer testimonials and a recognized certification badge from the Drummond Group.

E

Enersense International Plc

empower.eu

70

Enersense International Plc is a well-established company founded in 2003, specializing in delivering essential services for tomorrow’s society with a focus on energy transmission and production, industrial energy transition, and telecommunications. The company operates primarily in Finland, the Baltics, and the Nordics, serving customers with lifecycle partnership models that cover design, construction, maintenance, and operation of energy and connectivity infrastructure. With a workforce of approximately 2000 experts and a revenue of EUR 425 million in 2024, Enersense holds a strong market position and is publicly listed on Nasdaq Helsinki (ESENSE). Technically, the website is built on WordPress CMS, utilizing modern web technologies such as jQuery, Foundation CSS framework, and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. Cookie consent is managed via CookieHub, and Google reCAPTCHA is implemented to secure forms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs best practices such as CAPTCHA and cookie consent mechanisms. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, Enersense’s website reflects a professional, trustworthy, and compliant digital presence aligned with its business stature. The domain registration data corroborates the company’s legitimacy and long-standing market presence. Strategic recommendations include enhancing DNS security, formalizing security policies, and expanding transparency around incident response and vulnerability disclosures.

D

Digmatix

alna.com

55

Digmatix is a technology company specializing in Microsoft Dynamics 365 ERP, CRM, AI, and cloud computing solutions tailored for various industries including finance, manufacturing, retail, and services. The company positions itself as a global partner empowering organizations with digital transformation through advanced Microsoft technologies. The website demonstrates a mature digital presence with comprehensive product and service offerings, client testimonials, and industry-specific solutions. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Smartsupp for live chat, indicating a well-integrated digital infrastructure. Security posture is strong with HTTPS, security headers, and anti-bot measures like Google reCAPTCHA Enterprise, though explicit security policies and incident response information are absent. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the professional content and detailed business information suggest a credible operation. Overall, the site is well-designed, user-friendly, and optimized for SEO and accessibility.

A

Assortis

assortis.com

52

Assortis is a well-established platform founded around 2000, focused on supporting organisations and technical consultants in the international development and cooperation sector. It offers a suite of services including tender alerts, expert databases, job boards, and training academies, positioning itself as a comprehensive resource for actors in development aid. The website reflects a professional and consistent brand with good content quality and user experience, targeting a medium-sized audience primarily in Belgium and the broader international cooperation community. Technically, the site uses Bootstrap and Material Design icons, with moderate performance and good mobile optimization, though accessibility and SEO could be improved. Security posture is moderate; while the domain is secured with clientTransferProhibited status and HTTPS is implied, no DNSSEC or security headers are enabled, and no cookie consent mechanism is present despite GDPR-relevant privacy policy. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy but could benefit from enhanced security and privacy compliance measures.

N

Nacionalinis socialinės integracijos institutas (Žmogui.lt)

zmogui.lt

42

Nacionalinis socialinės integracijos institutas (Žmogui.lt) is a Lithuanian non-profit organization dedicated to fostering social integration through innovative programs targeting vulnerable social groups and youth. The organization operates multiple ongoing initiatives such as human rights education, media monitoring, social taxi services, and senior citizen support, positioning itself as a key national player in social innovation. The website reflects a professional digital presence built on WordPress with the Avada theme and Slider Revolution plugin, offering good content quality and clear navigation. However, the absence of WHOIS data limits domain trust verification. Security posture is solid with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are recommended for compliance and trust. Contact information is comprehensive, including multiple team member emails and a physical address. Overall, the site demonstrates a good balance of business credibility and technical implementation, with room for improvement in privacy compliance and security best practices.

K

Titulinis | Kitokie Projektai

kitokieprojektai.net

56

The website www.kitokieprojektai.net appears to be a small-scale site built using the Wix platform, as evidenced by the extensive use of Wix-specific scripts and styles. The site content is minimal and lacks substantive business information, contact details, or privacy and cookie policies. The domain WHOIS data is unavailable or the domain may not be registered, which raises significant concerns about the legitimacy and trustworthiness of the site. Technically, the site uses modern web technologies and is mobile-optimized by default through Wix, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no security headers or policies detected. Overall, the site presents a low trust profile and requires significant improvements in transparency, compliance, and content quality.

S

Shift4

revelsystems.com

68

Shift4 provides advanced restaurant management software and payment processing solutions, targeting the food and beverage industry. Their offerings include point of sale systems, contactless payments, online ordering, and cloud-based back office management, positioning them as a significant player in restaurant technology. The website reflects a professional and modern digital presence, leveraging contemporary web frameworks such as Next.js and React, and integrating multiple third-party services for analytics, accessibility, and cookie compliance. Security posture is strong with HTTPS enforced and some security best practices in place, though explicit security headers and vulnerability disclosure mechanisms are absent. The lack of WHOIS data limits domain trust verification, but the overall business credibility and website quality suggest a legitimate enterprise. Strategic recommendations include enhancing transparency with published security policies and WHOIS data, and improving privacy compliance documentation.

K

Kauno Grūdai

kauno-grudai.lt

72

Kauno Grūdai is a major Lithuanian company specializing in the manufacturing of food products and animal feed. The website presents a professional and modern digital presence using Vue.js and Nuxt.js frameworks, with integrated analytics via Google Tag Manager and a cookie consent mechanism powered by Cookiebot, indicating compliance efforts with GDPR. However, the absence of explicit privacy policy and terms of service pages, as well as missing contact information, limits the transparency and user trust aspects. The website is fully accessible without any detected WAF or blocking mechanisms, and it uses HTTPS, ensuring secure communications. The lack of WHOIS data due to query limits restricts the ability to fully verify domain registration legitimacy, which slightly reduces the overall trust score.

W

Widen legal

lextal.eu

68

Widen legal is a professional legal services firm established in 2023, offering a broad range of legal expertise primarily focused on the Baltic region and EU markets. The firm provides specialized services in corporate law, employment law, public procurement, tax law, data protection, and other key legal sectors. Their market position is that of a medium-sized regional legal company with experienced partners and a client-friendly approach. The website reflects a modern and professional digital presence with multilingual support and detailed team profiles, enhancing client trust and engagement. Technically, the site is built on WordPress with modern plugins for forms and translation, hosted behind Cloudflare DNS, and uses HTTPS with good SSL configuration. However, DNSSEC is not enabled, representing a minor security gap. Security posture is generally good with cookie consent implemented, but lacks explicit security policies or incident response information. Privacy compliance is basic, with no visible privacy policy or terms of service pages in the provided content. Overall, the website is professional, trustworthy, and well-structured, suitable for its target audience of legal service clients in the Baltic and EU regions.

U

UAB Elgama-Elektronika

elgama.eu

49

UAB Elgama-Elektronika is a Lithuanian company specializing in the development and production of electricity meters and smart metering solutions, serving energy sector companies and industrial clients. With over 30 years of experience and exports to more than 25 countries, the company offers a broad product range from simple household meters to complex multifunctional devices, alongside electronics manufacturing services and automated metering data systems. The website reflects a professional and consistent brand presence with clear business information and active social media engagement. Technically, the website is built on OpenCart CMS using modern JavaScript libraries such as jQuery, Bootstrap 4, and Swiper.js. It implements GDPR-compliant cookie consent with opt-in mechanisms and uses Google Analytics for traffic monitoring. The site is mobile optimized and demonstrates good SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses deferred script loading to optimize security and performance. However, it lacks explicit security headers and a public vulnerability disclosure policy. No exposed sensitive data or vulnerable libraries were detected. The WHOIS data is privacy protected as per EURid policy for .eu domains, which is typical and justified for this business type. Overall, the website presents a trustworthy and professional digital presence with good security posture and privacy compliance. Strategic recommendations include enhancing security headers, publishing an incident response contact, and improving accessibility compliance to further strengthen trust and resilience.

The website urm.lt is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks access to any substantive content. As a result, no business information, contact details, or policies are visible. The site appears to be protected by Cloudflare's security infrastructure, but this also prevents a full analysis of its content and security posture. The lack of WHOIS data due to query limits further restricts domain legitimacy assessment. Overall, the site presents as a placeholder security checkpoint rather than an active business-facing website at this time.