Security Directory

M

MadeByShape

fortetrinity.co.uk

59

MadeByShape is a boutique digital agency founded in 2010, specializing in branding, web design, development, SEO, and content writing. The company recently acquired the goodwill of Forte Trinity, integrating their clients and expanding their service portfolio. Positioned as a small but expert team, MadeByShape emphasizes personalized service and a strong company culture. Their market position is that of a reliable and experienced agency serving a diverse client base primarily in the UK. Technically, the website is built on modern frameworks including Craft CMS and Tailwind CSS, with integrations for Google Analytics and Vimeo for media content. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting is managed through Ionos SE, consistent with the domain registration data. From a security perspective, the site uses HTTPS with good SSL configuration and standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit privacy and cookie policies, as well as incident response contact information, which are important for compliance and user trust. Overall, the website and business demonstrate a solid digital presence with good professionalism and trustworthiness. Strategic improvements in privacy compliance and security transparency would enhance their risk posture and user confidence.

K

KNVB Expertise

knvbexpertise.nl

59

KNVB Expertise serves as the central knowledge and innovation center for professional football in the Netherlands, providing research, publications, and expertise services primarily targeted at professionals and stakeholders within Dutch football. The website reflects a well-established entity closely affiliated with major football organizations such as KNVB, Eredivisie, and Keuken Kampioen Divisie, positioning it as a trusted authority in its niche. Technically, the site is built on a Drupal CMS platform, employs modern web technologies including JavaScript and SVG graphics, and integrates Google Analytics for user behavior tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Security-wise, the site enforces HTTPS, includes cookie consent mechanisms, and avoids exposing sensitive data, but lacks publicly available detailed security or incident response policies. Overall, the website demonstrates a strong professional presence with high trustworthiness and compliance with privacy regulations.

U

UAB FOGSAT

fogsat.lt

39

UAB FOGSAT operates as a specialized retailer and service provider in Lithuania, focusing on IPTV, satellite, and terrestrial digital TV equipment, as well as video surveillance systems. The company serves both consumers and businesses, offering products online and in a physical store located in Kaunas. They also provide installation and project design services, positioning themselves as an official UCLAN representative in the Baltic region. The website reflects a small but established business with clear contact details and a professional online presence. Technically, the website employs legacy JavaScript libraries such as jQuery 1.11.3 and uses Google Analytics and Tag Manager for user tracking. While the site is accessible and functional, it lacks modern security headers and uses outdated libraries, which may expose it to vulnerabilities. Privacy and cookie policies are present with a consent mechanism, indicating basic compliance with GDPR requirements. Security posture is moderate; HTTPS is enabled, but the absence of security headers and use of outdated scripts reduce the overall security score. No explicit security policies or incident response contacts are provided, which could be improved to enhance trust and compliance. The WHOIS data is unavailable due to query limits, limiting domain registration trust analysis. Overall, the website is professional and functional but would benefit from technical updates and enhanced security practices to improve its risk profile and user trust.

S

Starfire's canine care line EUROPE

starfirescareline.eu

58

Starfire's canine care line EUROPE operates a professional e-commerce website specializing in luxury grooming products for dogs, including shampoos, conditioners, sprays, and treatments. The company targets pet owners and professional groomers across Europe, positioning itself as an official seller with a focus on quality and safety. The website is built on the Prestashop platform, leveraging modern web technologies and integrated with popular marketing and analytics tools such as Google Analytics, Facebook Pixel, and Omnisend. The technical infrastructure is solid, with good mobile optimization and SEO practices, although performance is moderate. Security posture is strong with HTTPS, security headers, and secure forms, but lacks visible incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service page. Overall, the website presents a trustworthy and professional front with room for improvement in privacy and security transparency.

Resmila is a Lithuanian small business specializing in surface treatment services including sandblasting and powder coating. The company targets local businesses and individuals requiring professional surface preparation and coating solutions. Their website presents key services clearly and includes contact information and social media links, supporting a moderate market presence. Technically, the site uses older JavaScript libraries and Bootstrap 3.2, with Google Analytics and Tag Manager for tracking, but lacks modern security headers and privacy policies. Security posture is moderate with risks from outdated libraries and missing compliance documentation. Overall, the site is functional and professional but requires improvements in security and privacy compliance to enhance trust and reduce risk.

U

UAB Cesnos logistika

cesnos.lt

39

UAB Cesnos logistika is a Lithuanian logistics and transportation company specializing in international and local freight services including sea, land, air transport, warehousing, customs brokerage, and container sales. The company emphasizes door-to-door delivery with a broad network of foreign partners, focusing on quality, professionalism, and customer trust. Their website reflects a small but established business with certifications and clear contact information. Technically, the site uses common web technologies such as jQuery, Google Analytics, and Lightbox, with a responsive design and cookie consent mechanisms indicating GDPR awareness. Security posture is moderate with HTTPS enforced but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is professional and functional but could improve security and compliance transparency.

U

UAB Viltana

radilux.lt

40

RADILUX, operated by UAB Viltana, is a Lithuanian small business specializing in the manufacture and retail of window coverings including roller blinds, blinds, mosquito nets, Roman blinds, and room dividers. The company targets customers primarily in the Žemaitija region, offering a wide range of over 450 fabric options and emphasizing quality materials and fast production and installation times. The website reflects a local retail business with clear contact information and a presence on Facebook, supporting customer engagement and marketing efforts. Technically, the website employs legacy technologies such as jQuery 1.7.2 alongside modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook SDK. While the site is accessible and functional with basic mobile optimization and SEO, there is room for modernization and improvement in performance and accessibility standards. The presence of multiple tracking scripts indicates moderate user tracking, balanced by a visible cookie consent mechanism and privacy policy aligned with GDPR requirements. From a security perspective, the site uses HTTPS but lacks visible HTTP security headers and employs an outdated JavaScript library version, which could expose it to vulnerabilities. No explicit security or incident response policies are published, and WHOIS data is unavailable due to query limits, though no suspicious indicators are present. Overall, the security posture is moderate but could benefit from enhancements to protect user data and improve trust. The overall risk assessment suggests a legitimate small business with a functional online presence but with technical and security improvements recommended to enhance resilience, compliance, and user trust. Strategic recommendations include updating legacy libraries, implementing security headers, publishing security policies, and improving mobile and accessibility features.

E

Eurodigital

eurodigital.lt

40

Eurodigital is a Lithuanian-based supplier specializing in electronics and video surveillance systems, notably as the largest certified Dahua Technology representative in the Baltic states. With over a decade of experience, the company offers consulting and implementation services for video surveillance, EV charging equipment, solar energy, and electrical installation products. Their market position is strong within the regional technology sector, targeting businesses requiring security and electronic solutions. Technically, the website employs a traditional tech stack with jQuery, Bootstrap, and integrates Google Analytics and Facebook Pixel for tracking. While the site is mobile-optimized and professionally designed, it uses an outdated jQuery version, posing security risks. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible HTTP security headers and explicit security policies. WHOIS data is unavailable due to query limits, but website content and contact details support legitimacy. Overall, the site is functional and credible but would benefit from technical and security updates.

V

Voetbalmedia B.V.

voetbal.nl

67

Voetbal.nl is a well-established online platform dedicated to amateur football in the Netherlands, operated by Voetbalmedia B.V. It serves a broad audience including players, referees, coaches, and supporters by providing match results, standings, schedules, and multimedia content. The platform is closely affiliated with the KNVB, the Dutch football association, reinforcing its market position as a trusted source for amateur football information. Technically, the website leverages modern web technologies including Drupal CMS, Google Analytics, Google Tag Manager, and various advertising networks, ensuring a robust and scalable infrastructure. The site is mobile-optimized and incorporates consent management for privacy compliance. Security-wise, the platform enforces HTTPS, uses reCAPTCHA for login forms, and includes standard security headers, reflecting a mature security posture. However, explicit security policies and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website demonstrates a strong balance of business credibility, technical maturity, and privacy compliance, making it a reliable resource for its target audience.

A

Albright International

albrightinternational.com

66

Albright International is a UK-based manufacturer specializing in the design and production of D.C. Contactors and Emergency Disconnect Switches, serving industrial and transportation sectors including electric vehicles and battery systems. The company holds multiple certifications such as ISO9001, ISO14001, UL, and CCC, indicating a strong commitment to quality and compliance. Their website reflects a medium-sized enterprise with a professional digital presence, offering detailed product information and technical support services. Technically, the website is built on WordPress with modern SEO tools like Yoast and uses jQuery and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Performance is moderate, with room for improvement in accessibility and additional security headers. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, though the website content and certifications support a trustworthy business. Overall, the website presents a credible and professional business with a solid technical foundation but would benefit from enhanced security policies and transparency regarding domain registration and incident response.

Г

Грабо Медия АД

grabo.bg

53

Grabo.bg is a leading Bulgarian e-commerce platform specializing in promotional deals across various sectors including shopping, dining, entertainment, beauty, hotels, vacations, and excursions. The platform targets Bulgarian consumers primarily in Sofia and other major cities, offering discounts up to 70%. The business model revolves around aggregating and selling time-limited deals from various service providers and merchants. The website is well-branded, professionally designed, and offers mobile applications for Android, iPhone, and Huawei devices, enhancing accessibility and user engagement. Technically, Grabo.bg employs a modern technology stack including jQuery, Firebase Messaging, Google Analytics, Google Tag Manager, Facebook SDK, Microsoft Clarity, and Klaviyo for marketing automation. The site is served over HTTPS with strong security headers, ensuring secure data transmission. The platform integrates social login options and uses extensive tracking and advertising networks to optimize marketing efforts. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices such as anonymizing IP addresses in analytics and enforcing secure cookies. However, it lacks explicit cookie consent mechanisms and does not publish a dedicated security policy or incident response contacts. There is no vulnerability disclosure or security.txt file, which are recommended for transparency and security maturity. No critical vulnerabilities or exposed sensitive data were detected. Overall, Grabo.bg presents a trustworthy and professional online presence with a strong market position in Bulgaria. To enhance compliance and security posture, the company should implement explicit cookie consent, publish security policies, and establish vulnerability disclosure channels. These steps will improve user trust and regulatory compliance, supporting sustainable growth and risk management.

O

Ohnamama

ohnamama.bg

69

Ohnamama.bg is a Bulgarian-language media platform focused on pregnancy, parenting, and child development. It offers expert advice, personalized content for registered users, and promotional offers, positioning itself as a trusted resource for parents and expecting parents in Bulgaria. The site is professionally designed with clear navigation and a good content structure, supported by a moderate to fast technical infrastructure leveraging modern analytics and advertising technologies. Security posture is strong with HTTPS, form protections, and consent management, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website demonstrates a mature digital presence with good business credibility and trust indicators.

T

Телеграф - Новините без компромиси

telegraph.bg

65

Telegraph.bg is a Bulgarian online news media portal delivering comprehensive coverage of national and international news, including business, politics, science, technology, health, crime, and entertainment. The site targets Bulgarian-speaking audiences seeking up-to-date news and multimedia content. The website demonstrates a mature digital presence with a well-structured layout, good SEO practices, and mobile optimization. It integrates multiple third-party analytics and advertising services such as Gemius, Google Analytics, Facebook Pixel, Taboola, and OneSignal for push notifications. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible privacy and cookie policies, which impacts privacy compliance. WHOIS data is privacy protected in accordance with GDPR, with Bulgarian nameservers indicating legitimate hosting. Overall, the site is professional and trustworthy but should improve transparency on privacy and cookie usage to enhance compliance and user trust.

B

BOTA TECHNIK

botatechnik.pl

48

BOTA TECHNIK is a Polish company specializing in the servicing, construction, and sales of marine equipment, targeting maritime and offshore energy sectors. Established in 2011, it offers a range of services including propulsion system maintenance, marine automation, and authorized sales of marine devices. The company maintains a solid market position in Poland and serves offshore industries with specialized products and services. The website reflects a professional digital presence built on WordPress with modern SEO and accessibility features. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit incident response information. The domain registration is consistent and long-standing, supporting the company's legitimacy. Strategic improvements in privacy policy publication and security disclosures would enhance trust and compliance.

L

Klausyk RADIJO – lzinios.lt

lzinios.lt

36

The website lzinios.lt functions as a Lithuanian radio streaming portal aggregating multiple local radio stations such as RC, Rus Radio, Zip FM, Relax FM, and Rock FM. It primarily targets Lithuanian-speaking audiences interested in online radio content. The site is built on WordPress with Beaver Builder and uses Google Analytics and Google Tag Manager for visitor tracking. The content is currently minimal, indicating ongoing maintenance, with embedded iframes for advertising and radio streaming. No privacy or cookie policies are present, and no direct contact information is provided on the site. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. The site appears to be a small media niche player with moderate technical implementation but basic content and security posture.

U

UAB Diena Media News

diena.lt

59

Diena.lt is a prominent Lithuanian online news portal operated by UAB Diena Media News, offering timely news coverage from Lithuania and around the world. The website serves a broad Lithuanian-speaking audience interested in national, regional, and international news, supported by regional editions such as Kauno diena and Klaipėdos diena. The business model primarily revolves around digital news publishing, subscription services, and advertising revenue. The site demonstrates consistent branding and a professional online presence.

N

Neopay

neopay.lt

65

Neopay is a Lithuania-based fintech company specializing in smart payment and financial solutions for online and physical retail businesses across Europe. Their product suite includes payment initiation, automated payouts, user verification, and Buy Now Pay Later (BNPL) services, targeting sectors such as e-commerce, utilities, and iGaming. The company positions itself as a technology-driven B2B payment solutions provider with a focus on API integrations and compliance with European financial standards. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, Swiper.js, and Lottie animations. The site demonstrates good mobile optimization, moderate performance, and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers such as Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Contact information is limited to a contact form without direct emails or phone numbers, which may affect user trust. Overall, the website presents a professional and trustworthy front for a fintech business but requires improvements in privacy compliance and user contact transparency to enhance trust and regulatory adherence. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing consent mechanisms, and publishing incident response and vulnerability disclosure information.

The website dainusvente.lt serves as the official platform for the Lithuanian Song Festival, a major cultural event celebrating Lithuanian singing and dancing traditions. It is managed by the Lietuvos nacionalinis kultūros centras, a national cultural institution. The site provides detailed information about the festival's history, upcoming events, news, and media archives, targeting participants, cultural enthusiasts, and the general Lithuanian public. The business model is non-profit, focusing on cultural preservation and event promotion. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript modules, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with good navigation and design quality, though accessibility features are basic. No CMS or hosting provider details were identified. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No forms or sensitive data collection points were found, reducing immediate risk. The absence of WHOIS data limits domain legitimacy verification, but the presence of official branding, government partnerships, and event patronage supports trustworthiness. Overall, the website is a professional and credible cultural event platform with moderate technical maturity and some gaps in privacy compliance and security best practices. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance trust and compliance.

B

BRIDGE Housing

bridgehousing.com

58

BRIDGE Housing is a well-established non-profit organization specializing in the development and management of affordable housing communities primarily along the West Coast of the United States. With over four decades of experience, the organization positions itself as a leader in creating safe and healthy living environments that empower residents. The website reflects this mission with professional design and relevant content, targeting residents, partners, and stakeholders interested in affordable housing solutions. Technically, the website is built on WordPress using the Divi theme, incorporating modern tools such as Google Analytics and MonsterInsights for tracking and SEO optimization via Yoast. Hosting appears to be supported by AWS infrastructure, indicated by DNS nameservers. The site demonstrates good mobile optimization and moderate performance, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and visible security headers, which are recommended to enhance security posture. Privacy compliance is weak, with no detected privacy or cookie policies or consent mechanisms, which could expose the organization to regulatory risks. Overall, the website is credible and professional but would benefit from improved privacy compliance and enhanced security configurations to reduce risk and build greater trust with users.

N

NAI Hiffman

hiffman.com

63

NAI Hiffman is a well-established commercial real estate services firm based in Chicago, with a national presence through its Hiffman National platform. The company offers a comprehensive suite of services including brokerage, property management, advisory, leasing, capital markets, and research. Their website reflects a mature digital presence with professional design, clear navigation, and rich content targeting commercial real estate clients and investors. Technically, the site is built on WordPress with modern plugins and tracking tools, though there is room for improvement in security headers and DNS security. The security posture is solid with HTTPS and domain transfer protections, but lacks some advanced protections like DNSSEC and explicit security policies. Privacy compliance is basic, with no cookie consent mechanism despite active tracking pixels. Overall, the website and domain data indicate a credible and trustworthy business with a strong market position in real estate services.

A

Able Digital Ltd

formsable.com

67

Able CDP is a specialized Customer Data Platform provider focused on delivering comprehensive marketing attribution and conversion tracking solutions. Their platform integrates deeply with major advertising and analytics services such as Google Analytics 4, Facebook Conversions API, Google Ads, and Stripe, enabling clients to track full customer journeys and attribute revenue accurately. The company targets digital businesses, SaaS providers, and e-commerce stores seeking to optimize marketing ROI through precise data insights. Technically, the website is built on modern frameworks including Next.js and React, with integrations to Google Cloud services like BigQuery and Looker Studio. The platform emphasizes server-side tracking and real-time data connectivity, reflecting a mature digital infrastructure. Performance and mobile optimization are excellent, supporting a seamless user experience. From a security perspective, the site enforces HTTPS and employs standard security headers, but lacks explicit published security policies or incident response contacts. Privacy compliance is addressed with a comprehensive privacy policy, though cookie consent mechanisms could be improved. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the professional presentation and client testimonials support overall trust. Overall, Able CDP presents a robust and professional offering with strong technical and business foundations. Strategic improvements in transparency around security and privacy practices would further enhance trust and compliance.

V

Viralsweep

viralsweep.com

68

Viralsweep is a well-established viral marketing platform specializing in sweepstakes, contests, giveaways, and related promotional tools designed to help businesses grow their email and SMS lists, increase social media engagement, and drive sales. The platform offers a comprehensive suite of apps and integrations targeting a broad audience including marketers, Shopify stores, agencies, and startups. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and strong branding consistency. Technically, the site leverages modern technologies such as Google Tag Manager, Intercom, and Cloudflare for performance and security, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved and a cookie consent mechanism is lacking, which may impact privacy compliance. The absence of WHOIS data limits domain trust verification, but the overall business credibility is supported by customer testimonials, case studies, and a transparent privacy policy. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and improving security headers to further strengthen trust and compliance.

C

CIG

cig-architecture.com

51

CIG is a specialized manufacturing and construction company pioneering complex 3D-formed steel constructions, leveraging over 50 years of experience and innovative shipbuilding production techniques. The company targets architects and artists seeking advanced steel shaping solutions, positioning itself as a leader in this niche market. The website reflects a medium-sized enterprise with a professional digital presence built on Drupal 11, incorporating modern web technologies and multimedia content to showcase projects and capabilities. Security posture is adequate with HTTPS and CAPTCHA protections, though improvements in DNSSEC and security headers are recommended. Privacy policies exist but lack comprehensive cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the company's market position.

S

SidePanda Inc.

sidepanda.com

57

SidePanda Inc. operates a suite of Shopify apps focused on appointment bookings, split payments, and waiver e-signatures, targeting Shopify merchants globally. The company positions itself as a trusted provider with over 3000 Shopify stores using its solutions, offering priority support and multi-country language support. The business model is SaaS-based, leveraging Shopify's app ecosystem for distribution and monetization. Technically, the website is built on Webflow, integrates Google Analytics, Google Tag Manager, and Crisp Chat for analytics and customer engagement. The site is mobile optimized with good SEO practices and moderate performance. Hosting is via Webflow's CDN, ensuring reliable delivery. However, accessibility features are basic and security headers are missing. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure. The lack of security headers and cookie consent mechanisms are notable gaps. WHOIS data is missing, which raises concerns about domain legitimacy and age, though the website content and Shopify app presence support business credibility. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, improved security headers, and transparent domain registration information to strengthen trust and compliance.

A

AEW

aew.com

70

AEW is a leading global real estate investment management firm with over 40 years of experience managing $82 billion in assets across North America, Europe, and Asia Pacific. The company serves institutional investors with a broad range of investment strategies including core, core plus, opportunistic, and real estate securities. AEW operates through multiple offices worldwide and is affiliated with Natixis Investment Managers, enhancing its market credibility and global reach. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding. Technically, the website employs modern web technologies including Google Analytics, LinkedIn Insight Tag, and Font Awesome icons. It supports HTTPS with anonymized IP tracking for privacy and includes a cookie consent mechanism compliant with GDPR. The site is mobile optimized and accessible, providing a good user experience. However, no explicit CMS or hosting provider information was detected. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data for the domain is unavailable, which is unusual and slightly reduces trust, but the professional site and corporate affiliations mitigate concerns. Overall, AEW's website demonstrates a mature digital presence suitable for its enterprise scale and industry. Strategic improvements in security transparency and WHOIS data verification are recommended to enhance trust and compliance.

S

SelectLeaders

selectleaders.com

73

SelectLeaders operates as a specialized commercial real estate job network, providing a platform for job seekers and employers within the commercial real estate industry. The website offers services such as job search, resume uploads, and job postings across multiple real estate associations, positioning itself as a market leader in this niche. The affiliation with Bisnow enhances its credibility and market reach. Technically, the site employs modern web technologies including Laravel Livewire, Alpine.js, and integrates analytics tools like Google Analytics and Microsoft Clarity, indicating a mature digital infrastructure. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contacts. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness but does not detract significantly from the overall legitimacy given the professional presentation and business context. Overall, the site demonstrates a solid security posture and compliance with privacy regulations, though improvements in transparency and security headers are recommended.

L

Lietuvos nacionalinis kultūros centras

lnkc.lt

48

Lietuvos nacionalinis kultūros centras (LNKC) is a Lithuanian governmental cultural institution dedicated to preserving and promoting national culture, folklore, and heritage. The website serves as a portal for cultural information, events, publications, and archives, targeting cultural organizations, folklore enthusiasts, and the general public interested in Lithuanian traditions. The institution holds a significant position in Lithuania's cultural landscape, providing authoritative resources and organizing national cultural events. Technically, the website uses a custom CMS (Smart Web) with a technology stack including jQuery, Bootstrap, and Google Analytics. While the site is mobile-optimized and well-structured, it uses outdated JavaScript libraries that may pose security risks. Security posture is moderate, with HTTPS implied but no visible security headers and outdated libraries. Privacy compliance is basic with cookie consent and privacy policy present, but no terms of service or incident response information is found. Overall, the website is professional and trustworthy but would benefit from technical and security improvements.

B

BĮ Klaipėdos miesto globos namai

kgnamai.lt

46

BĮ Klaipėdos miesto globos namai is a Lithuanian municipal social care institution focused on providing services to elderly individuals and the local community. The organization is actively involved in EU-funded projects such as the Interreg VI-A Latvia-Lithuania Programme, demonstrating engagement in regional cooperation and social welfare initiatives. The website serves as an information portal offering news, contact details, service descriptions, and community engagement opportunities. Technically, the website is built on WordPress with a modern theme and uses common web technologies including jQuery, Google Analytics, Facebook SDK, and Leaflet.js for interactive maps. The site is mobile-optimized, accessible, and implements GDPR-compliant cookie consent mechanisms. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, it lacks explicit security headers and dedicated security or incident response policies on the site. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to query limits, but the domain appears legitimate and consistent with a public institution. Overall, the website presents a trustworthy and professional digital presence for a government social care entity. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and compliance maturity.

F

FILLIX

fillix.lt

43

FILLIX is a Lithuanian insurance brokerage company providing insurance, reinsurance, and risk management services to both businesses and private individuals. The website positions the company as a professional broker focused on tailored insurance solutions and risk management. The company appears to be relatively young, founded around 2020, and targets the Lithuanian market primarily. The website is built on WordPress using popular plugins such as Elementor, Yoast SEO, and Revolution Slider, indicating a modern and maintainable technical infrastructure. The site is well-structured with multilingual support and SEO optimization, enhancing its digital presence. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, showing awareness of GDPR compliance. However, no WHOIS data is available to verify domain registration details, which limits trust verification. No explicit security headers or incident response information are present, suggesting room for improvement in security posture. Overall, the website is professional and functional but would benefit from enhanced transparency and security practices.

P

Penki

penki.lt

67

Penki is a Lithuanian telecommunications provider specializing in internet and smart TV services, including fiber optic, 4G, and 5G internet solutions. The company targets both private customers and businesses, offering innovative and technologically advanced services. The website reflects a medium-sized enterprise with a professional online presence, leveraging modern web technologies such as WordPress and Elementor. The technical infrastructure includes multiple analytics and marketing tools, indicating a mature digital marketing strategy. Security posture is generally good with HTTPS enabled and cookie consent implemented, though explicit security policies and incident response information are absent. The lack of WHOIS data limits full domain trust assessment, but the website content and branding suggest legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility features to strengthen compliance and user trust.

M

MPS-Yhtiöt

mpsbaltic.lt

61

MPS Baltic is a Lithuanian-based company specializing in executive search and HR services, operating as part of the MPS-Yhtiöt group. The website presents a professional and modern digital presence built on HubSpot CMS, offering services such as executive search, competency assessments, training, and outplacement. The company targets businesses and candidates in Lithuania, positioning itself as a leader in direct search within the local market. The website includes GDPR-compliant privacy and cookie policies, a contact form with reCAPTCHA Enterprise protection, and social media presence on LinkedIn. However, WHOIS data is unavailable, limiting domain trust verification. The technical infrastructure is modern, with good security practices observed, though some security headers could be improved. Overall, the site is well-designed, mobile-optimized, and provides a trustworthy user experience.

M

MB, RINKOS SRAUTAS

ikiwi.lt

47

iKiwi Lietuva, legally MB, RINKOS SRAUTAS, is a small digital marketing agency based in Vilnius, Lithuania, founded around 2022. The company specializes in digital marketing services including Facebook and Google advertising, SEO, email marketing, and website development. Their market position is focused on local businesses seeking to enhance their online presence and sales through targeted digital campaigns and SEO strategies. The website is professionally designed with consistent branding and clear navigation, targeting Lithuanian-speaking business clients. The company maintains active social media profiles on Facebook and LinkedIn, enhancing trust and outreach. Technically, the website is built on WordPress using the Flatsome theme and several plugins such as Yoast SEO, Contact Form 7, and Simple Google reCAPTCHA. It integrates Google Analytics, Google Tag Manager, Facebook Pixel, and MailerLite for marketing automation and analytics. The site is mobile-optimized and performs moderately well, with good SEO practices implemented. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent banners, though security headers are not explicitly detected. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a vulnerability disclosure policy suggests room for improvement. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Contact information is clearly presented, including a contact email and physical address. Overall, iKiwi Lietuva presents a trustworthy and professional digital marketing service provider with a modern web presence and good security hygiene. The lack of WHOIS data limits domain trust analysis, but the website content and external signals support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility features to further strengthen compliance and security posture.

V

Vedliai

vedliai.lt

61

Vedliai is a Lithuanian educational technology company specializing in an informatics learning system for grades 1 through 10. The platform is widely adopted in Lithuania, serving over 60% of schools, and has received international recognition including the World Summit Awards 2023. The website presents a professional and content-rich digital presence, targeting teachers and schools with educational content, training, and digital learning tools. Technically, the site is built on Hostinger's Website Builder using modern frameworks like Astro, with integrations for Google Analytics and Facebook Pixel for marketing and analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable due to query limits, limiting domain registration trust verification. Overall, the site demonstrates a mature digital infrastructure and strong market positioning in the Lithuanian education sector.

A

Ancora Chile

ancorachile.cl

44

Ancora Chile is a well-established technology partner company founded in 1984, specializing in brand representation, project development, technical services, and product commercialization primarily in the marine and aquaculture sectors within Chile and parts of Latin America. The company has a solid market position with exclusive representation of 14 leading brands and a medium-sized operational footprint. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with common plugins like Revolution Slider and uses Google Analytics for tracking. However, some technical aspects such as outdated jQuery and missing security headers present moderate security risks. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is available mainly through a contact form, with no direct emails or phone numbers visible. Overall, the website is functional and credible but would benefit from enhanced security and privacy practices.

B

BOTA Technik

botatechnik.com

44

BOTA Technik is a medium-sized Polish company specializing in marine propulsion services and building, with a strong focus on servicing all propulsion elements from engines to propellers, including specialized bow thruster services. The company serves marine industry professionals and offshore energy sectors, offering a broad range of services and products such as marine engines, propulsion systems, thruster services, stern tube seal services, and ship automation solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting an international audience with multilingual support. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and SEO best practices, though performance is moderate and some security headers could be improved. Security posture is good with HTTPS enabled and no visible critical vulnerabilities, but DNSSEC is not enabled and there is no security.txt or vulnerability disclosure policy. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is trustworthy and professional but could benefit from enhanced privacy and security policies.

AART ELECTRONICS is a French company founded in 2004 specializing in the centralization and outsourcing of procurement for the Ministry of Defense. With over 30 years of leadership experience, it has established a recognized presence in the French defense sector, providing logistics chain management and technical R&D solutions. The company operates from Neuilly Sur Seine and Croissy Sur Seine, emphasizing quality, competitiveness, and reliability. The website reflects a professional business with certifications such as ISO 9001, EN 9120, and ISO 14001, signaling commitment to quality and environmental standards. Technically, the site is built on WordPress using the Avada theme and includes modern tools like Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is good with HTTPS and CAPTCHA protections, but lacks published privacy and terms policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is functional and professional but could improve transparency and compliance documentation.

A

Archimedict B.V.

archimedict.nl

53

Archimedict B.V. is a Dutch technology company founded in 2005, specializing in the development and maintenance of online environments. Their services include front-end and back-end web development, data integration, open source CMS implementations, and consultancy. The company serves notable clients such as KNVB and voetbal.nl, positioning itself as a trusted partner in the Dutch digital services market. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the website employs modern JavaScript libraries, Google Analytics, and service workers for progressive web app capabilities. Hosting is provided by Oxilion B.V., a reputable Dutch hosting provider. While the website uses HTTPS and DNSSEC, it lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is strong, with a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. The security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, resulting in a moderate to high trust level. Strategic recommendations include strengthening security headers, publishing a security policy, enhancing accessibility, and improving SEO metadata completeness to further solidify the company's digital maturity and trustworthiness.

C

CIG

centralindustrygroup.com

51

CIG is a specialized company pioneering complex 3D-formed steel constructions, leveraging over 50 years of experience and innovative shipbuilding production methods applied to construction. Their market position is strong within the niche of architectural and artistic steel fabrication, serving architects, artists, and construction professionals globally. The website reflects a medium-sized enterprise with a clear focus on craftsmanship and innovation in steel forming. Technically, the site is built on Drupal 11, uses modern web technologies including video embedding and Google Analytics, and is hosted with a reputable registrar. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-structured, supporting the company's business credibility.

D

Damen Marine Components

vdvms.com

53

Damen Marine Components (DMC) is a specialized manufacturer and service provider of marine vessel propulsion and maneuvering systems, including rudders, steering systems, anchors, and chains. The company operates globally with multiple production, service, and sales locations, primarily serving the maritime transportation and manufacturing sectors. The website reflects a professional B2B business model with a strong focus on marine components and vessel performance improvement. Technically, the site is built on WordPress with modern plugins and tracking tools, including Mapbox for interactive global office mapping. Security posture is solid with HTTPS and cookie consent, though lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with no explicit privacy or terms of service pages found. The WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the professional presentation and detailed contact information provided. Overall, the site is well-structured, SEO optimized, and provides comprehensive contact and location information, supporting a high level of business credibility.

Wortelboer is a well-established family business specializing in the manufacturing and supply of anchors, anchor chains, and connecting parts for the maritime industry, including commercial shipping, yachting, and offshore sectors. With over 70 years of experience and a strong presence in Rotterdam, the company offers worldwide delivery and maintains a significant stock to ensure fast and reliable service. The website reflects a professional and consistent brand image, supported by ISO certifications and class certificates from major classification societies, reinforcing its market credibility. Technically, the website employs modern web technologies such as JWPlayer for multimedia, Google Tag Manager and Analytics for tracking, and reCAPTCHA for form security. The site is mobile-optimized with good navigation and SEO practices, although accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms, but lacks explicit security headers and public security policies or incident response information. No vulnerabilities or suspicious content were detected. Privacy compliance is addressed with a cookie consent banner and privacy policy, though GDPR compliance indicators could be more explicit. Overall, Wortelboer presents a trustworthy and professional online presence with a solid business foundation. Strategic improvements in security policies, accessibility, and transparency would further enhance its risk posture and user trust.

D

DESAmedia

desamedia.lt

46

DESAmedia is a Lithuanian technology service provider specializing in the creation and planning of innovative digital products and unique web programming solutions for businesses. The company targets businesses seeking tailored web development, ecommerce platforms, and digital advertising services. Their website demonstrates a professional and consistent brand presence, supported by client testimonials and recognizable client logos, indicating a trusted market position. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though additional security headers and explicit security policies could enhance their stance. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website and business presence suggest a legitimate and professional small-sized technology company with room for technical and security improvements.

Epas.lt is a Lithuanian digital services provider specializing in website creation, mobile application development, advertising services, graphic design, SEO optimization, and hosting. The website presents a basic but functional online presence targeting businesses or individuals seeking digital solutions. The market position appears local and small-scale with no explicit information on company size or history. The technical infrastructure includes integration with Google Analytics and Facebook Pixel for marketing and tracking purposes, but lacks advanced security headers and privacy policies. The website is accessible without any WAF or blocking mechanisms, but the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is moderate with room for improvement in privacy compliance and security best practices.

E

ECOVIS ProventusLaw

ecovis.lt

67

ECOVIS ProventusLaw is a Lithuania-based international law firm specializing in legal, tax, audit, and corporate services with a strong focus on fintech, AML compliance, and data protection. The firm is part of the global ECOVIS consulting group and holds top-tier rankings from reputable legal directories such as The Legal 500 and Chambers and Partners. Their services target businesses and financial institutions operating in Europe, offering comprehensive support in regulatory and corporate matters. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential analytics and consent management tools such as Google Analytics, Google Tag Manager, and Cookiebot. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and employs consent mechanisms for cookies, but lacks explicit security headers and dedicated security policy pages. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the professional presentation and consistent branding support legitimacy. Overall, the website presents a strong business and technical profile with minor areas for security enhancement. Strategic recommendations include implementing comprehensive security headers, publishing incident response policies, and maintaining regular audits of third-party scripts to sustain trust and compliance.

P

Pension Real Estate Association

prea.org

68

The Pension Real Estate Association (PREA) is a well-established non-profit trade association serving the global institutional real estate investment industry. It caters primarily to institutional investors such as pension funds, endowments, foundations, insurance companies, and investment advisory firms. PREA offers a comprehensive suite of services including industry research, conferences, publications, webinars, and awards programs, positioning itself as a key resource and networking hub within the real estate investment sector. The website reflects a professional and consistent brand image with rich, relevant content targeted at its institutional audience. Technically, the website is built on Mura CMS 7.0 and leverages modern web technologies including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security. The site is mobile optimized with good SEO and accessibility features, though some accessibility improvements could be made. Performance is moderate, and the site uses HTTPS with a strong SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and use of CAPTCHA on forms. However, the absence of security headers and a cookie consent mechanism indicates room for improvement in compliance and security hardening. The lack of WHOIS data limits domain trust verification, though the professional presentation and industry presence support legitimacy. Overall, the site maintains a solid security posture but should enhance privacy compliance and security headers to strengthen trust. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security policies, and conducting regular security audits. These steps will enhance the site's security posture, compliance, and user trust, supporting PREA's role as a trusted industry association.

N

National Council of Real Estate Investment Fiduciaries

ncreif.org

71

NCREIF is a well-established US-based institutional real estate association founded in 1982, providing comprehensive data products, investment performance indices, educational programs, and industry events to its members. The website reflects a professional and consistent brand presence targeting institutional investors and real estate professionals. Technically, the site uses modern web technologies including Google Analytics and Tag Manager, with moderate performance and good mobile optimization. Security posture is moderate but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is longstanding and consistent with the organization's claims, enhancing trustworthiness.

S

Sinoptik

sinoptik.ua

66

Sinoptik.ua is a well-established Ukrainian weather forecasting website providing detailed weather information for over 29,000 localities in Ukraine and more than 104,000 cities worldwide. The site targets residents and visitors seeking reliable weather forecasts, offering 7-day and 10-day detailed forecasts. Its business model is primarily advertising-supported, partnering with FORECA for meteorological data. Technically, the site employs modern JavaScript frameworks and integrates multiple ad networks and tracking services, ensuring a responsive and SEO-optimized user experience. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit security policy or vulnerability disclosure is present. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism despite tracking scripts. Overall, the site is professional, trustworthy, and technically mature, with room for improvement in security headers and privacy transparency.

H

Hosting Ukraine LLC

h2o.best

56

The website h2o.best represents a residential real estate project named ЖК H2O, developed by Stolitsa Group, a well-established real estate developer in Kyiv, Ukraine. The project emphasizes a unique location with extensive waterfront, modern amenities, and a secure, private living environment. The site targets homebuyers and investors interested in comfort-class housing with business-class features. Technically, the site uses a modern JavaScript stack including jQuery, Swiper, and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. Hosting is provided by Hosting Ukraine LLC, consistent with the business location. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is transparent and consistent with the business claims, indicating legitimacy.

R

Realist Digital

realist.digital

44

Realist Digital is a small digital agency focused on providing digital solutions tailored for the real estate sector. The website is primarily in Ukrainian and presents basic information about the company’s services with a modern but simple design. The company was founded around 2014, consistent with the domain registration date. The site uses common JavaScript libraries and Google Analytics for tracking visitor behavior. However, it lacks critical compliance and transparency features such as privacy policies, cookie consent mechanisms, and contact information, which limits trust and user confidence. Technically, the site is moderately optimized but could improve in mobile responsiveness and accessibility. Security posture is minimal with no detected security headers or advanced protections.

U

UAB INFOFACE

infoface.lt

40

UAB INFOFACE is a Lithuanian small-sized technology company specializing in professional web development, branding, and digital marketing services. Their website showcases a comprehensive portfolio of services including website creation, e-commerce development, content management systems, SEO, social media marketing, and advertising solutions. The company targets businesses and organizations seeking to establish or improve their online presence. The website is well-structured, visually consistent, and provides detailed contact information and client testimonials, indicating a credible market position within Lithuania. Technically, the website employs a traditional tech stack with jQuery 1.11.3, Google Analytics, Google Tag Manager, and Google Maps API integrations. While the site is mobile-optimized and SEO-friendly, it uses an outdated jQuery version and lacks modern security headers, which could pose security risks. Performance is moderate, and accessibility features are basic. No CMS platform is explicitly identified. From a security perspective, the site uses HTTPS as indicated by the base URL, but no explicit security headers were detected. There is no visible privacy or cookie policy, nor any incident response or vulnerability disclosure information, which indicates compliance gaps especially under GDPR. No forms collecting personal data were found on the main page, reducing immediate risk exposure. The WHOIS data is unavailable due to query limits or privacy protection, limiting domain registration trust analysis. Overall, the website is functional, professional, and credible for its business scope but requires improvements in privacy compliance, security best practices, and technology updates to enhance its security posture and regulatory adherence.

A

ASSITEJ International

assitej-international.org

59

ASSITEJ International is a globally recognized non-profit association dedicated to Theatre & Performing Arts for Children & Young People. Founded in 2009 and based in Italy, it serves as a network uniting theatres, organizations, and individuals worldwide to advocate for the artistic and educational rights of children. The organization offers key services including advocacy, events, awards, and professional networking, positioning itself as a leader in its niche cultural sector. Technically, the website is built on WordPress with modern SEO and accessibility features, supported by Google Analytics and Tag Manager for performance insights. Security posture is solid with HTTPS and bot protection via reCAPTCHA Enterprise, though improvements are recommended in DNSSEC deployment and formal security policies. Overall, the site demonstrates good professionalism and moderate trustworthiness, with room for enhanced privacy compliance and security transparency.