High-risk security reports

V

Vilniaus dailės akademija

vda.lt

42

Vilniaus dailės akademija is a Lithuanian higher education institution specializing in arts, design, and architecture. The website presents a professional and content-rich platform targeting prospective and current students, academic staff, and partners. It offers detailed information about academic programs, events, and institutional structure. The technical infrastructure relies on legacy JavaScript libraries such as jQuery 1.10.2 and Bootstrap 3.1.1, indicating moderate digital maturity with opportunities for modernization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the use of outdated libraries and absence of security headers suggest room for improvement. The lack of WHOIS data limits domain legitimacy verification, though the website itself appears trustworthy and well-maintained. Overall, the site scores well on content quality and business credibility but should address technical and security enhancements to strengthen its posture.

Practica Capital is a well-established Baltic venture capital firm with over 12 years of experience managing multiple funds and investing in early-stage technology companies across sectors such as biotech, fintech, marketplace, and AI. The company targets entrepreneurs and startups primarily in Lithuania and the broader Baltic region, positioning itself as a key player in the regional VC ecosystem. Their website reflects a professional and consistent brand image, supported by strong partnerships with reputable European financial institutions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Slick Carousel, with integration of Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features could be improved. Security-wise, the site enforces HTTPS and includes CSRF tokens and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Overall, the security posture is solid but could be enhanced by adding vulnerability disclosure policies and security contact information. Privacy compliance is addressed with a privacy policy and cookie consent, indicating GDPR awareness. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. No critical security issues or blocking mechanisms were detected, allowing a comprehensive analysis. Strategically, Practica Capital should focus on enhancing security transparency and accessibility, while maintaining its strong market position and partnership ecosystem to continue growing its influence in the Baltic venture capital market.

The website dillali.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered with GoDaddy since 2017 and uses Amazon AWS DNS servers, indicating a potentially legitimate hosting setup. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or market position. Technically, no metadata, scripts, or security headers were detected, and DNSSEC is not enabled, which suggests room for improvement in domain security. The security posture cannot be fully evaluated due to the blocked content, but the absence of HTTPS and security policies is a concern. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to inaccessibility. Strategic recommendations include resolving access issues, enabling HTTPS, publishing privacy and cookie policies, and providing clear contact and security information to improve trust and compliance.

U

UAB Baltic Condition

condition.lt

30

UAB Baltic Condition is a Lithuanian IT company specializing in innovative information technology solutions, including web development, CRM software rental, and cloud computing services. Established in 2005, the company serves over 500 clients primarily in Western Europe and collaborates closely with partners in Germany. Their business model focuses on providing customized software solutions and web services, leveraging a quality management system certified under ISO 9001:2008. The website reflects a medium-sized enterprise with a professional digital presence built on ASP.NET and DNN CMS technologies, incorporating standard web analytics via Google Analytics. However, the absence of HTTPS and security headers, along with missing privacy and cookie policies, indicates a need for improved security and compliance measures. The WHOIS data for the domain is unavailable or invalid, raising concerns about domain registration transparency, which impacts overall trustworthiness.

E

Ekonominės Konsultacijos ir Tyrimai

ekt.lt

37

Ekonominės Konsultacijos ir Tyrimai (EKT) is a Lithuanian consultancy firm specializing in strategy, effectiveness, and value enhancement. Their website presents a professional team of partners and consultants with expertise in strategy implementation, processes, marketing, project management, and personnel management. The firm targets businesses and organizations seeking consultancy and training services to improve operational efficiency and strategic outcomes. The website is built on WordPress and integrates modern web technologies including Google Tag Manager, Google Analytics, and reCAPTCHA for security and analytics purposes. The site is well-structured, mobile-optimized, and provides clear navigation and professional content, although it lacks explicit privacy and cookie policies.

UAB ALPI Baltika is a Lithuanian transport and logistics company operating since 2006, providing a wide range of freight forwarding and transportation services including land, sea, and air transport, customs brokerage, and warehousing. The company is part of a larger network of over 60 companies across Europe and globally, positioning itself as a reliable regional player in the logistics sector. Their website reflects a professional service offering with clear navigation and multilingual support, targeting businesses and individuals requiring comprehensive logistics solutions. Technically, the website employs modern JavaScript libraries such as jQuery, Fancybox, and Swiper, and integrates Google Analytics for user tracking. The site is served over HTTPS with a cookie consent mechanism, indicating a baseline compliance with privacy regulations. However, there is room for improvement in security headers and accessibility features. The absence of WHOIS data limits domain trust verification, but the website content and external partnerships support legitimacy. Security posture is moderate with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The lack of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests an opportunity to enhance transparency and readiness. Overall, the site is functional and professional but would benefit from strengthened security and compliance documentation. Strategically, ALPI Baltika should focus on improving security best practices, publishing clear policies, and verifying domain registration details to bolster trust and compliance in the competitive logistics market.

I

InSpe.com

inspe.com

43

InSpe.com is a medium-sized holding company with a history dating back to 1991, operating across multiple countries and industries including development, manufacturing, and trading. The company has established several subsidiaries and brands, positioning itself as a significant player in its sectors. The website is built on a modern WordPress platform using Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced DNS security and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Contact information is primarily via a contact form, with no direct emails or phone numbers listed. Social media presence is active on Facebook, LinkedIn, and YouTube. Overall, the website is professional and trustworthy but could improve in privacy and security practices.

The website muziekvoorstelling.nl is currently a parked domain hosted by VDX Internet Services B.V., a Dutch domain registrar and hosting provider. The site offers minimal content primarily advertising domain registration and hosting services by VDX. The business model focuses on domain parking and related web services targeting individuals and businesses in the Netherlands. The domain is well-established, created in 2007, and registered through a reputable registrar, indicating legitimacy. Technically, the site uses basic HTML and CSS with Google Analytics and Google Tag Manager for tracking. There is no detected CMS or advanced frameworks. The site performance is moderate with basic mobile optimization and accessibility. SEO optimization is poor due to minimal content and lack of meta descriptions or keywords. Hosting is provided by VDX, consistent with the domain parking service. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for improved security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is available but limited to VDX support channels. No incident response or vulnerability disclosure information is provided. Overall, the website is low risk but offers limited business or security value in its current parked state. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and improving content quality to enhance trust and compliance.

Ž

Žalvaris

zalvaris.lt

40

Žalvaris is a Lithuanian company specializing in comprehensive waste management services for businesses and organizations, aiming to maximize social and economic benefits while minimizing risks. The company has an established online presence since 2003, indicating a mature market position. Their website provides information primarily in Lithuanian with an English alternate, focusing on their services, responsible activities, and quality control. Technically, the site uses modern web technologies including jQuery and Google Analytics, hosted on Microsoft Azure DNS infrastructure. The site is mobile optimized and SEO friendly, with a cookie consent mechanism and privacy policy in place, reflecting basic GDPR compliance. Security posture is adequate with HTTPS and CSRF tokens, but lacks advanced security headers and explicit incident response information. Overall, the website is professional and trustworthy, though contact information is not explicitly provided on the main page.

R

REO Investment

reo.lt

40

REO Investment is a Lithuanian IT services company established in 2009, offering IT equipment sales, short-term rental of IT and conference equipment, e-commerce, and technical center services. The company targets business clients and public institutions, with a focus on long-term partnerships and quality management, evidenced by their ISO 9001:2015 certification. The website reflects a medium-sized business with moderate digital maturity, using legacy technologies such as Cufon for fonts and jQuery-based UI components. While the site is functional and provides basic navigation and content, it lacks modern privacy and security disclosures, including a privacy policy and cookie consent mechanisms. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. The domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance, security headers, and contact accessibility would enhance trust and compliance.

C

Conmaster

conmaster.lt

38

Conmaster is a Lithuanian company specializing in consulting, engineering, legal, and construction project management services, targeting clients involved in large and complex investment construction projects globally. The website presents a professional image with multilingual support and a focus on client success through qualified expertise. Technically, the site is built on WordPress with common plugins and enforces HTTPS, but lacks advanced security headers and detailed WHOIS transparency. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. However, the absence of explicit contact emails and phone numbers, combined with missing WHOIS data, reduces overall trustworthiness. Strategic improvements in security headers, domain registration transparency, and contact information visibility are recommended to enhance credibility and security posture.

K

Error

kwbcommunications.com

47

The domain kwbcommunications.com is registered since 2014 and uses Wix as its hosting platform. However, the website currently displays a Wix error page indicating that the domain is not connected to an active website. There is no business content, contact information, or policies available on the site. The technical infrastructure is based on Wix with AngularJS and jQuery libraries, but no advanced security headers or analytics tools are implemented. The security posture is minimal with no DNSSEC enabled and no privacy or cookie policies present. Overall, the site lacks professionalism and trust indicators, resulting in a low risk and credibility profile.

Lingvobalt UAB is a Lithuanian-based professional translation agency specializing in translations into Baltic languages including Lithuanian, Latvian, and Estonian, as well as other European languages. The company emphasizes industry expertise across multiple sectors such as law, medicine, finance, IT, and marketing, leveraging modern CAT tools to optimize costs and quality. The website presents a professional and SEO-optimized digital presence built on WordPress, utilizing popular plugins and Google analytics tools to monitor user engagement. However, the absence of WHOIS registration data raises concerns about domain legitimacy or privacy protection usage. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit contact information was found in the analyzed content.

V

Vertimų biuras Mažas Pasaulis

mp-vertimai.lt

38

Vertimų biuras Mažas Pasaulis is a Lithuanian translation agency established in 2008, offering a wide range of linguistic services including written and oral translations, editing, proofreading, transcription, and notarized document certification. The company operates multiple offices across Lithuania and serves clients both locally and internationally, emphasizing timely and high-quality service. The website reflects a regional market position with a focus on comprehensive language coverage and customer service. Technically, the site uses standard web technologies with Google Analytics and Tag Manager for tracking, but lacks advanced CMS or modern frameworks. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business credibility is strong with transparent contact information and consistent WHOIS data.

The website vatesi.lrv.lt is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks automated access and requires human verification. Due to this, no substantive business content, contact information, or policies are visible for analysis. The domain WHOIS data is unavailable or invalid, preventing verification of domain registration details or ownership. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated threats or abuse. However, this also limits the ability to assess the website's business model, technical infrastructure, or security posture beyond the presence of Cloudflare's protection mechanisms. Overall, the site currently lacks publicly accessible information to evaluate its credibility, compliance, or operational maturity.

Ž

Žmogaus teisių stebėjimo institutas

hrmi.lt

39

Žmogaus teisių stebėjimo institutas is a Lithuanian non-profit organization dedicated to human rights monitoring, advocacy, research, and education. The organization targets legal professionals, civil society representatives, and individuals interested in human rights protection. The website reflects a professional and consistent brand presence with a clear focus on its mission and services. Technically, the site is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

U

UAB Performancy

84.lt

39

Performancy is a Lithuanian-based digital marketing agency specializing in Google Ads optimization with over 18 years of experience. The company targets businesses seeking to improve their online advertising performance through Google Ads, offering services such as search ads, display advertising, Performance Max campaigns, and analytics integration. The website is built on WordPress with Elementor and integrates Google marketing and analytics tools, reflecting a modern digital infrastructure. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though some security headers and policies could be improved. The domain registration is consistent and legitimate, supporting the company's credibility. Overall, the website presents a professional and trustworthy front for its services.

Sweetroot.lt is a Lithuanian website primarily focused on microgreens products beneficial for health, supplemented by a blog covering diverse lifestyle topics such as internet tools, faith, entertainment, gardening, industry, canoe rental, and fashion. The site targets Lithuanian-speaking consumers interested in health and lifestyle content. The business model appears to be informational and content-driven, possibly supporting product promotion related to microgreens. The domain is relatively new, registered in 2022, consistent with the website's content and scope. Technically, the website is built on WordPress using the Zakra theme, with common plugins such as Contact Form 7 and a sliding captcha for spam prevention. It uses Cloudflare DNS services and serves content over HTTPS, ensuring basic security. The site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and explicit privacy or cookie policies. From a security perspective, the site benefits from HTTPS and Cloudflare DNS but lacks visible security headers like CSP or HSTS, which could improve its security posture. No critical vulnerabilities or WAF blocking mechanisms were detected. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, Sweetroot.lt is a small, content-focused website with a good user experience and moderate technical implementation. To enhance trust and security, it should implement privacy and cookie policies, add security headers, and provide clearer business contact information.

M

MediaCom

mediacom.lt

44

MediaCom is an international media planning agency with a local presence in Lithuania, offering services such as digital marketing, media planning and buying, analytics, and social media solutions. The website is professionally designed using WordPress CMS and includes modern plugins like Revolution Slider and GDPR Cookie Compliance, reflecting a moderate to good level of digital maturity. The site is mobile optimized and SEO friendly with structured data and meta tags. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks some security headers and explicit contact details, which could be improved. The absence of WHOIS data for the .lt domain limits full trust verification of the domain registration, though the website content and branding appear legitimate and consistent with a professional media agency. Overall, the site presents a trustworthy and professional image but would benefit from enhanced security headers and clearer contact information to improve business credibility and security posture.

Ogilvy Vilnius is a well-established creative advertising agency based in Lithuania, founded in 2006. The company offers a comprehensive range of services including creative campaigns, design, strategy, and research, serving a broad business audience seeking branding and marketing solutions. The agency holds a strong market position as the largest advertising agency in Lithuania, supported by a prestigious client portfolio and multiple industry awards. Technically, the website is built on a modern React and Next.js stack, hosted likely by Baltnet, with excellent performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and policies could enhance protection. Privacy compliance is basic but present, with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a professional and trustworthy business with a strong digital presence.

Roger Wolff Architect is a small architectural practice with a website currently under construction. The business appears to focus on architectural design services, likely targeting local clients interested in residential or small-scale projects. The website content is minimal, with only basic contact information provided and no detailed business descriptions or service listings. The domain is well-established, registered since 2005, indicating a potentially stable business presence despite the minimal online footprint. Technically, the website uses basic JavaScript and CSS but lacks modern frameworks or CMS platforms. The site is served over HTTP without HTTPS, which is a significant security concern. There are no security headers or privacy-related policies implemented, and no analytics or tracking tools are detected. The website design and user experience are poor, with no mobile optimization or accessibility features evident. From a security perspective, the absence of HTTPS and security headers exposes visitors to risks such as data interception. The lack of privacy and cookie policies indicates non-compliance with GDPR and other data protection regulations. No incident response or vulnerability disclosure information is available, suggesting limited security maturity. Overall, the website presents a low-risk profile due to minimal data collection and interaction but suffers from poor professionalism and security posture. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving website content and design, and implementing basic security best practices to enhance trust and compliance.

S

Synergy Finance

synergy-finance.com

42

Synergy Finance operates a modern investment platform focused on providing diversified investment portfolios and funds to individual and institutional investors. The company emphasizes scientific research-based investment strategies and offers consulting and training services. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, which should be addressed to enhance business credibility.

Comparo GmbH is a small, regionally focused general contractor based in Leipzig, Germany, specializing in new construction, building renovation, and apartment refurbishment. Established in 2010, the company serves primarily private stock corporations and large housing associations, leveraging a reliable network of approximately 25 subcontractor firms. Their services extend to construction management, planning, valuation, and supervision, with a focus on efficient and environmentally conscious building practices. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit policies could enhance protection. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a reliable regional general contractor.

M

Metalbazar.Com

metalbazar.com

32

Metalbazar.com operates as an online marketplace specializing in steel billets and various metal products including copper and aluminum. Founded in 2006, it targets mills, suppliers, traders, and agents within the manufacturing sector. The platform facilitates buy and sell offers for a wide range of steel and metal commodities, positioning itself as a niche trading service in the metal manufacturing industry. The website content is primarily in English with some multilingual elements, reflecting a diverse target audience. The business model centers on connecting buyers and sellers through an online portal, with no direct e-commerce transactions visible on the homepage.

Elsis is a well-established Lithuanian ICT group founded in 1991, offering a broad range of technology solutions including software development, telecommunications, and defense infrastructure projects. The company holds multiple ISO certifications reflecting a mature approach to quality, environmental, occupational health and safety, and information security management. Their market position is strong within Lithuania and the Baltic region, targeting government, defense, energy, and healthcare sectors. Technically, the website is built on WordPress with common frameworks and libraries, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and ISO 27001 certification, though lacking some HTTP security headers and explicit incident response contacts. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data limits domain legitimacy verification but the professional site content and certifications support trustworthiness.

A

Audiotonas

audiotonas.lt

48

Audiotonas is a well-established Lithuanian company specializing in professional audio, video, and lighting technology solutions for business, entertainment, education, and public sectors. With a domain age dating back to 1998 and a comprehensive portfolio of services including system design, installation, and sales, the company holds a strong market position in Lithuania. Their website reflects a mature digital presence with detailed project showcases and client references. The technical infrastructure is based on a modern WordPress CMS with SEO and analytics plugins, ensuring good performance, mobile responsiveness, and accessibility. The use of Google Analytics and Sender.net indicates moderate user tracking balanced with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and no visible vulnerabilities or exposed sensitive data. However, the site could improve by implementing additional security headers and publishing explicit security policies or incident response contacts. Overall, Audiotonas presents a trustworthy and professional online presence with strong compliance to privacy regulations and a clear business focus. Strategic improvements in security transparency and policy publication would further enhance their risk profile and customer trust.

R

RUBINETA

rubineta.com

46

RUBINETA is a well-established Lithuanian manufacturer specializing in water faucets, shower products, and accessories, holding the position as the largest producer in the Baltic states. The company has a strong market presence since 1999, serving both local and international markets including Europe and CIS countries. Their business model combines manufacturing with e-commerce through partner online stores, targeting B2B clients and technical service specialists. The website reflects a professional and consistent brand image with clear product catalogs and active news updates. Technically, the website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and APIs such as Google Maps, Hotjar, and Facebook Pixel for analytics and user engagement. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and reCAPTCHA on forms, complemented by cookie consent mechanisms compliant with GDPR. However, the absence of DNSSEC and security headers presents opportunities for enhancement. No explicit security or incident response policies are published, which could be addressed to improve transparency and trust. Overall, RUBINETA's digital presence is credible and professional, supporting their manufacturing business effectively. Strategic improvements in security configurations and policy disclosures would further strengthen their risk management and compliance stance.

M

Metalistas.lt

metalistas.lt

45

Metalistas.lt is a well-established Lithuanian metal processing company with a history dating back to 1960. The company specializes in cold stamping, assembly-welding, machining, and related engineering services, serving a broad international client base across Europe and beyond. Their website reflects a professional and consistent brand presence, providing clear information about their services and contact details. Technically, the site is built on WordPress, uses modern web technologies such as jQuery and Google Fonts, and includes a comprehensive cookie consent mechanism, indicating a good level of digital maturity. From a security perspective, the website enforces HTTPS and implements cookie consent with detailed user controls, which aligns with GDPR requirements. However, there is room for improvement in security headers and explicit security policies or incident response information. The WHOIS data presents some inconsistencies, notably a future domain creation date, which should be investigated to ensure domain legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, Metalistas.lt demonstrates a solid business and technical foundation with good privacy compliance and security posture. Strategic enhancements in security policy transparency, vulnerability disclosure, and WHOIS data accuracy would further strengthen trust and compliance. The website offers a good user experience with clear navigation and relevant content tailored to industrial clients seeking metal processing services.

The website www.cozywood.lt currently presents only a minimal anti-DOS challenge page that blocks access to actual content unless JavaScript and cookies are enabled. Due to this, no meaningful business information, metadata, or contact details are accessible. The domain WHOIS data is unavailable or invalid, which raises concerns about the domain's registration legitimacy. The lack of HTTPS and security headers further weakens the security posture. Overall, the site appears to be either under protection or misconfigured, limiting any comprehensive analysis of its business or technical maturity.

U

UAB “Airplus1 Lituanica”

airplus1.co.uk

46

UAB “Airplus1 Lituanica” is a Lithuanian company specializing in intelligent ozone solutions for disinfection, odor removal, and water treatment. Founded in 2016, the company designs, manufactures, supplies, installs, and services ozone generators and related technologies, targeting business clients across Lithuania and Europe. Their market position is that of a regional leader offering customized engineering solutions and smart ozone systems. Technically, the website is built on WordPress with Elementor, featuring modern SEO and analytics integrations, and is mobile-optimized with good user experience. Security posture is solid with HTTPS, reCAPTCHA protection on forms, and cookie consent, though explicit security headers and policies are lacking. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact channels and scientific research references enhancing credibility.

G

Gruvi Media

gruvimedia.lt

34

Gruvi Media is a Lithuanian small-sized media company specializing in video content creation for businesses, influencers, brands, and performers. Their services include social media videos, promotional clips, reels, music videos, event highlights, and communication strategy development. The website is built on WordPress with WooCommerce and uses modern plugins for SEO and multimedia presentation. The site is well-designed, mobile-optimized, and provides rich multimedia content showcasing their portfolio. However, the absence of WHOIS data and lack of explicit privacy, cookie, and contact information pages reduce trust and compliance levels. Security posture is moderate with HTTPS enabled but missing security headers and policies. Overall, the site presents a professional image but would benefit from enhanced transparency and security practices.

V

VIKO

vtdko.lt

41

Vilniaus kolegija (VIKO) is a large professional higher education institution in Lithuania and the Baltic region, offering programs in design, construction, and technology faculties. The website is well-structured and professionally designed using WordPress with modern plugins such as Elementor and Smart Slider 3. It targets students and prospective students seeking vocational and higher education. The technical infrastructure is solid with HTTPS enabled, modern frameworks, and good mobile optimization. Security posture is good with no visible vulnerabilities, but lacks published security policies and incident response information. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service documents. Overall, the site is trustworthy and credible, with transparent WHOIS data consistent with the institution's identity.

U

UAB Kautra

kautra.lt

48

UAB Kautra is a well-established Lithuanian transportation company operating since 1934, specializing in passenger transport services including city, intercity, and international routes, as well as bus rental services. The company positions itself as one of the most experienced passenger carriers in Lithuania, targeting travelers within Lithuania and abroad. The website reflects a professional business presence with clear service offerings and structured data to enhance search engine visibility. Technically, the website is built on WordPress, utilizing common technologies such as jQuery, Google reCAPTCHA for bot protection, and Cookiebot for cookie consent management. The site demonstrates moderate performance and good mobile optimization, with SEO best practices like meta tags and Open Graph data implemented. However, some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. The cookie consent mechanism is comprehensive and transparent, but the absence of a clear privacy policy and terms of service pages is a compliance gap. The WHOIS data for the domain is unavailable or invalid, which limits the ability to fully verify domain legitimacy. Overall, the website presents a trustworthy and professional image with room for improvement in privacy compliance and security hardening. The lack of WHOIS data is a concern but does not necessarily indicate malicious intent given the business maturity and content quality.

W

Wielton S.A.

wielton.com.pl

36

Wielton S.A. is a well-established Polish manufacturer specializing in the production of truck semi-trailers, construction trailers, agricultural trailers, and dump trucks. The company operates a broad product portfolio targeting transport, construction, and agricultural sectors, supported by a network of subsidiaries and partners across Europe. Their website reflects a mature digital presence with comprehensive product information and service offerings, including telematics and refurbishment services. Technically, the website is built on WordPress with modern integrations such as Google Maps API, Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a moderate to advanced digital maturity. The site is mobile-optimized and employs cookie consent mechanisms, although explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks DNSSEC and some recommended security headers, which could be improved. No critical vulnerabilities or blocking WAF mechanisms were detected, suggesting a stable security posture. Overall, the website demonstrates good business credibility and technical implementation, with room for enhanced privacy compliance and security hardening.

U

UAB Scapa Baltic

scapabaltic.com

40

UAB Scapa Baltic is a Lithuanian-based manufacturer specializing in soft leather and fabric furniture with a strong Scandinavian design influence. The company emphasizes innovation, quality, and comfort, supported by over 50 years of industry experience and a large professional workforce. Their business model focuses on customized furniture production, employee development, and maintaining a transparent and stable corporate culture. The website reflects a mature digital presence built on WordPress with modern plugins, offering rich content including employee stories and certifications. Security posture is generally good with HTTPS and captcha-protected contact forms, though the use of an outdated WordPress version and missing security headers present some risks. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. The lack of WHOIS registration data is a notable concern for domain legitimacy, warranting further verification. Overall, the site is professional and trustworthy in appearance but should address technical and compliance gaps to enhance security and credibility.

The website callcredit.co.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content. This blockage results in an inability to analyze the website's business offerings, policies, or technical infrastructure beyond the WAF presence itself. The domain is long-established since 1997 and registered through a reputable registrar, indicating a legitimate business entity likely operating in the finance sector. However, the lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, and compliance status. The Cloudflare block page indicates a security mechanism triggered by suspicious activity or automated requests, which may be intentional to protect the site from attacks or unauthorized scraping.

F

FinoBit.lt

dnbbustas.lt

42

FinoBit.lt operates as a Lithuanian consumer loan comparison platform, providing users with detailed information and reviews on various loan providers in Lithuania. The website targets Lithuanian consumers seeking affordable consumer credit options and offers tools such as loan calculators and affiliate links to financial institutions. The business model centers on affiliate marketing and informational services within the finance sector. Technically, the site is built on WordPress using popular plugins like WooCommerce, Elementor, and Yoast SEO, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and incident response policies suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit GDPR compliance indicators were found. The WHOIS data is inconsistent, showing a future creation date and registrant as a registrar company rather than the business itself, which reduces trustworthiness. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

Alkaloid AD Skopje is a well-established healthcare and manufacturing company specializing in pharmaceuticals, botanicals, cosmetics, and chemical products. The company has a strong regional presence with multiple subsidiary websites targeting different countries. Their website is professionally designed, mobile-optimized, and rich in content targeting healthcare professionals, investors, and consumers. The business model focuses on manufacturing and sales with an emphasis on research and development and corporate social responsibility. Technically, the website uses modern frameworks such as Next.js and React, hosted with Cloudflare DNS, ensuring good performance and security. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a credible and trustworthy business with a high legitimacy score based on WHOIS data and content consistency.

E

European Humanities University

ehu.lt

44

European Humanities University (EHU) is an international higher education institution focused on humanities and liberal arts, promoting civil society development and European values. The university offers a range of Bachelor's, Master's, and PhD programs, with a strong emphasis on academic excellence, critical thinking, and international student mobility. The website reflects a professional and well-structured digital presence, supporting prospective students and academic communities primarily from Belarus and Eastern Europe. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and MailerLite. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain reduces trust in domain legitimacy, but the website content and branding strongly support the institution's credibility. Overall, the site is well-optimized for user experience, mobile responsiveness, and SEO, making it a reliable source for academic information and engagement.

S

Spaustuvė Druka

druka.lt

26

Spaustuvė Druka is a Lithuanian printing and packaging company established in 1999, positioning itself as a leader in packaging printing within Lithuania. The company offers a range of services including quality printing, packaging solutions, design, and delivery, targeting businesses and individuals in the local market. The website is built on WordPress using the Astra theme and several popular plugins such as WooCommerce and Yoast SEO, indicating a modern and maintainable technical infrastructure. The site is mobile-optimized and includes SEO best practices with structured data and meta tags. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA; however, the absence of security headers and explicit security policies suggests room for improvement. Privacy and cookie policies are not found, which may impact GDPR compliance. Overall, the website reflects a professional business presence with moderate risk exposure due to missing compliance documentation and security headers.

The website eimin.lrv.lt is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any substantive content. No business information, contact details, or policies are visible on the landing page. The domain WHOIS data is unavailable or invalid, preventing verification of registration details or legitimacy. The technical infrastructure relies on Cloudflare services for security and analytics, but no CMS or other technologies are detectable. Due to the lack of accessible content and metadata, the website's business purpose, market position, and services cannot be determined. Security posture is limited to the presence of Cloudflare's WAF, but no further security headers or policies are observable. Overall, the site presents a low trust profile and minimal transparency.

The website hidrostatyba.lt is currently a parked domain with no active business content or services presented. The page primarily serves as a placeholder indicating the domain is for sale, with no company information, contact details, or meaningful content. The technical infrastructure relies on basic HTML and JavaScript with third-party advertising and tracking scripts, hosted via Cloudfront CDN. There is no evidence of HTTPS or security headers, and privacy compliance is minimal with only a basic privacy policy linked via a popup. Overall, the site lacks professionalism and trustworthiness, reflecting its status as a parked domain rather than an operational business website.

The website at eurocom.co.uk is currently inaccessible due to a JavaScript-based robot challenge screen implementing a proof-of-work CAPTCHA mechanism. This indicates the presence of a Web Application Firewall (WAF) or security layer designed to block automated or suspicious traffic. As a result, the actual website content, including business information, policies, and contact details, is not accessible for analysis. The domain is registered since 2014 via Namecheap, Inc., with no privacy protection, suggesting a legitimate business presence in the United Kingdom. However, the lack of accessible content limits the ability to assess the company's services, market position, or compliance posture. Technically, the site uses advanced client-side JavaScript for the CAPTCHA challenge, including Web Crypto APIs and worker threads, and is hosted behind AWS Cloudfront CDN. The page lacks SEO metadata, accessibility features, and visible security headers. No privacy, cookie, or terms of service policies are present on the challenge page. No contact information or social media links are found. The security posture is limited to the CAPTCHA challenge itself, with no other visible security best practices. Overall, the site’s security posture is moderate due to the presence of the challenge, but the lack of accessible content and policies results in a low trust and compliance score. The domain registration data is consistent with a legitimate business, but the inability to access the actual site content prevents a full evaluation. Strategic recommendations include enabling access for analysis, publishing privacy and cookie policies, adding contact and incident response information, and improving SEO and accessibility.