High-risk security reports

R

ROQUETTE AMILINA

amilina.com

45

ROQUETTE AMILINA is a medium-sized manufacturing company operating in Lithuania as part of the larger ROQUETTE Group. The company specializes in deep processing of wheat to produce products for the food, paper, and feed industries, positioning itself as a key player in Northern Europe's manufacturing sector. The website reflects a professional digital presence built on WordPress, with adequate mobile optimization and basic SEO features. Security posture is moderate with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website provides clear contact information and privacy compliance, but lacks explicit terms of service and security policy disclosures.

G

GEVARA

gevara.lt

48

Gevara is a well-established Lithuanian transportation and logistics company specializing in partial and full cargo transportation, customs brokerage, and warehousing services. Founded in 2007, it has grown to a large enterprise with approximately 300 employees and a recognized brand presence across Europe. The company targets businesses and individuals requiring reliable cargo transport solutions, leveraging its own fleet and customs expertise to maintain competitive market positioning. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, providing a good user experience with mobile optimization and multilingual support. Security posture is strong with HTTPS, HSTS, CSP for images, and reCAPTCHA on forms, although some security headers could be enhanced. Privacy compliance is addressed with a comprehensive privacy and cookie policy and consent mechanisms. Overall, the website reflects a professional and trustworthy business with moderate to good technical maturity and security awareness.

N

Nikulipe

nikulipe.com

48

Nikulipe is a fintech company specializing in enabling payment platforms to integrate local payment methods in emerging markets, primarily in Africa and Europe. The company targets payment service providers and global merchants, offering a single API integration to access multiple local payment schemes. Founded in 2019 and licensed by the Central Bank of the Republic of Lithuania as a Payment Initiation Service Provider, Account Information Service Provider, and Electronic Money Institution, Nikulipe positions itself as a leading player in the fintech payment integration space for emerging markets. The website reflects a professional and modern digital presence with clear business messaging and a focus on market expansion and payment innovation. Technically, the website is built on WordPress 6.8.1 using modern frameworks such as Foundation and includes various JavaScript libraries for UI and analytics. It employs multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, LinkedIn Insight Tag, and Leadfeeder, indicating a mature approach to user tracking and marketing intelligence. The site is mobile optimized and SEO friendly, with good content structure and navigation. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, which are areas for improvement. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent banner, and GDPR compliance indicators. No explicit security policy or incident response contacts are found, which could be enhanced to improve trust and readiness. Overall, Nikulipe's website demonstrates a strong business and technical foundation with good security and privacy practices. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

The domain www.l-t-p.com currently resolves to an expired Squarespace website placeholder page indicating the account has expired. No active business content, contact information, or company branding is present. The WHOIS query returned no registration data, suggesting the domain is either unregistered or expired. The technical infrastructure is minimal, relying solely on Squarespace's default scripts and styles with no custom content or metadata. Security posture is non-existent with no HTTPS or security headers detected. Privacy and compliance policies are absent, and no forms or data collection mechanisms are present. Overall, the site is non-functional and does not represent an active business presence.

S

swifthorsman.co.uk

swifthorsman.co.uk

37

The website swifthorsman.co.uk is currently a parked domain with minimal content indicating registration with Gandi.net. There is no active business presence, no contact information, and no privacy or cookie policies. The domain WHOIS data shows a creation date in the future (2025), which is inconsistent and likely erroneous, further reducing trust in the domain's legitimacy. Technically, the site uses basic HTML, CSS, and JavaScript with a Content-Security-Policy header, but lacks HTTPS and other security headers. There are no forms or data collection mechanisms, and no analytics or advertising technologies detected. Overall, the site is not operational as a business or service platform.

MB Studio Mitkus is a Lithuanian media company specializing in comic book creation, animation, and graphic design, with a focus on cultural and historical projects. The company collaborates with Lithuanian military and cultural institutions to produce educational and entertainment content, including a notable historical comic series and animation projects. Their market position is that of a niche creative media provider serving cultural and educational sectors in Lithuania. Technically, the website uses older but functional technologies such as jQuery 1.8.3 and Bootstrap, with moderate performance and basic mobile optimization. However, the site lacks HTTPS, security headers, and privacy policies, which negatively impacts its security posture and privacy compliance. No contact emails or phone numbers are explicitly provided, though social media presence is established on YouTube, Twitter, and Facebook. WHOIS data is unavailable due to query limits, limiting domain trust analysis. Overall, the website is functional and content-rich but requires significant improvements in security and privacy compliance to enhance trust and protect user data.

H

HML Project Management

hml.ee

34

HML Project Management is a specialized service provider in the real estate and construction sector, offering expert project management, cost management, design management, and related consulting services. The company targets organizations investing in, developing, building, or operating property assets, with a market presence primarily in Estonia and several other European countries. The website reflects a professional and consistent brand image with multilingual support and client trust indicators such as logos and project references. Technically, the website is built on WordPress using modern plugins like Elementor, Yoast SEO, and Slider Revolution. It employs Google Analytics via Google Tag Manager for tracking and is hosted by Radicenter OÜ, an Estonian registrar and hosting provider. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

A

Analytika

analytika.no

45

Analytika is a small Norwegian business specializing in management consulting and venture capital investments. The company positions itself as an innovative environment combining senior resources in business consulting and venture investments, targeting businesses seeking these services. The website is built using Angular framework and integrates Google Analytics for user tracking. The technical infrastructure appears modern but lacks visible advanced hosting or CMS details. Security posture is moderate with no detected security headers and unknown SSL configuration, and the absence of privacy and cookie policies indicates compliance gaps. The domain WHOIS data is unavailable, which reduces trustworthiness and raises questions about domain registration status. Overall, the website is professional and functional but requires improvements in security and privacy compliance to enhance trust and reduce risk.

Rebaltic is a Lithuanian real estate brokerage specializing in premium residential properties primarily in Vilnius and select other locations such as Palanga. The company positions itself as a market leader in the premium housing segment with over 12 years of experience and a large portfolio of exclusive properties. Their website offers detailed listings for sales and rentals, broker information, and contact details, targeting affluent clients seeking high-end real estate. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, FontAwesome for icons, and responsive design elements, providing a good user experience with clear navigation and mobile optimization. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. Privacy compliance is addressed with a privacy policy and cookie consent banner, indicating GDPR awareness. However, WHOIS data is unavailable due to query limits, limiting domain registration transparency. Overall, the site is professional and trustworthy but could improve security headers and incident response disclosures.

M

Miraculum S.A.

joko.pl

44

Joko.pl is the official e-commerce website for Joko cosmetics, a brand under the parent company Miraculum S.A., established in 2001. The site offers a wide range of makeup and skincare products targeting primarily Polish consumers interested in quality cosmetics at affordable prices. The business model focuses on direct online retail supported by product education and customer engagement through newsletters and social media channels. The website demonstrates a consistent brand presence and a good market position within the cosmetics retail sector in Poland. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Swiper.js for responsive and interactive user experience. It integrates Google Analytics and Google Tag Manager for marketing and analytics purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Hosting and domain registration are stable and consistent with the business identity. From a security perspective, the site uses HTTPS and secure form submissions, with a cookie consent mechanism in place, indicating compliance with GDPR requirements. However, DNSSEC is not enabled, and security headers are not detected, representing areas for improvement. No explicit security policies or incident response contacts are published, which could be a gap in transparency and readiness. Overall, Joko.pl presents a professional and trustworthy online presence with good content quality and business credibility. Strategic improvements in security hardening and transparency would further enhance its risk posture and customer trust.

The website inventship.eu is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful extraction of business, technical, or security information from the site itself. The WHOIS data indicates the domain is registered through Telia Lietuva, AB, a legitimate registrar, but no further registrant details or company information are available. Due to the lack of accessible content, no privacy, cookie, or security policies can be identified, and no contact information or business descriptions are present. The technical infrastructure cannot be assessed, and no technologies or frameworks are detectable. Security posture is unknown but likely poor given the absence of accessible content and security headers. Overall, the site appears blocked or restricted, limiting any comprehensive analysis.

B

Buhalterijos Centras

buhalterijoscentras.lt

45

Buhalterijos Centras is a Lithuanian small business specializing in accounting and business management services, with over 14 years of experience. The company offers a range of services including bookkeeping, company formation, company sales, and registered office provision. Their market position is that of a trusted local provider with a strong partner network and a focus on serving various business sectors in Lithuania. The website is built on Drupal 7, incorporating common web technologies such as jQuery, Google Analytics, Facebook Pixel, and Hotjar for analytics and marketing purposes. The site is well-structured, mobile-optimized, and provides clear contact information and client testimonials, enhancing business credibility. Security posture is generally good with HTTPS enforced and reCAPTCHA implemented, though the use of an outdated CMS version and lack of explicit security headers and policies present areas for improvement. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the website presents a professional and trustworthy front for the business, with moderate technical maturity and privacy compliance.