The state of the Lithuanian web: the region's contradiction

Lithuania has the largest web in the Baltics and gets the least attention for it. Estonia is the country people call digital, and Latvia is the one we write about most, because it is home. The Baltic Web Audit, our near-census of the Latvian, Estonian and Lithuanian web in July and August 2026, measured all three the same way. On almost every row, Lithuania lands at one extreme or the other, and rarely in the middle.

In short

Lithuania is the Baltic region’s contradiction: the largest and most commercial web of the three, 95,014 living .lt websites, with the weakest defences. It runs the most shops, the most Shopify sites and the most aggressive stance against the crawlers that train language models (18% block them). The same web signs only 2% of its domains with DNSSEC, against 22% in Estonia, and only 3% of its domains are actually protected against email spoofing, though 89% receive mail. Like Estonia, it hosts itself: one Lithuanian company serves 41.7% of the national web. Unlike Estonia, it leads just one of the audit’s 24 measures outright.

The Lithuanian web in numbers

The registry’s own daily export put .lt at 259,659 registered domains in late August 2026 (it reads 263,853 today). 133,893 of them appeared in a year of the public web index. 95,014 turned out to be living websites, and 38,879 are dead: pointing nowhere, parked at a placeholder or answering only errors. That is roughly 37% of registrations becoming a real site, just behind Estonia’s 38% and well ahead of Latvia’s 31%. The funnel for all three countries is in our piece on dead domains.

Against its neighbours, the same web looks like this. Every figure is from the report’s scoreboard.

Measure	Lithuania	Latvia	Estonia
Living websites	95,014	49,258	76,100
Dead domains, share of those measured	29%	31%	25%
Median mobile load (LCP)	6.33s	6.60s	5.73s
Sites with a good LCP, 2.5s or less	18%	15%	22%
Blocks model-training crawlers	18%	15%	8%
Blocks assistant crawlers	5%	7%	3%
DNSSEC signed	2%	12%	22%
Email actually protected against spoofing	3%	8%	9%
No DMARC record at all	71.8%	70.1%	59.5%
Cookies set before consent	71%	76%	65%
Hosted at home, of placeable sites	68.1%	40.8%	81.2%
Product markup on shops	3.3%	2.6%	14.7%

Lithuania leads one row of the 24 outright, and it is the faintest of praise: of the sites that installed a consent tool, 89% still set cookies before anyone clicks, against 90% in Latvia and 91% in Estonia. It shares a second lead with Estonia on the gap between desktop and mobile speed. Estonia leads 16 rows and Latvia six, and on every security row Lithuania is last or tied for last.

The biggest commercial web in the region

Lithuania’s web is not only the largest. It is the most visibly built to sell.

It runs the most shops. The audit labelled 13,600 Lithuanian sites as shops, against 8,708 in Estonia and 6,888 in Latvia. WooCommerce, the shop plugin for WordPress, was detected on 8,584 of them. Shopify is the second most common platform in Lithuania, on 1,761 sites against 906 in Latvia and 640 in Estonia. And the open-source shop pair OpenCart and PrestaShop is close to a Lithuanian speciality: 2,618 sites together, more than Latvia and Estonia combined.

It is paid for by ads more than its neighbours. Google AdSense, which places ads on a site and pays its owner, runs on 1,803 Lithuanian sites against 678 in Latvia and 660 in Estonia, roughly three times as many.

It markets with its own tools. Omnisend, an e-commerce marketing platform whose company lists its address in Vilnius, was detected on 860 Lithuanian sites, 47 Latvian and 48 Estonian. MailerLite, also founded in Lithuania, is on 463 Lithuanian sites against 40 and 123. Estonia measures its web with an analytics tool built at home; Lithuania markets with tools built at home.

The gap in all that commerce is the one that costs sales. Only 449 of the 13,600 Lithuanian shops carry product markup, the labels that let a shop’s goods appear as products in search results and assistants’ answers. That is 3.3%, against 14.7% in Estonia. The region’s largest retail web is nearly silent about what it sells.

It hosts itself, on two companies

Lithuania has the same shape as Estonia, with a different name on the door. Interneto vizija, which describes itself as one of the largest internet service providers in Lithuania and has operated since 2003, serves 39,623 living .lt sites: 41.7% of the national web, the same share Zone holds in Estonia. Hostinger, founded in Kaunas in 2004, carries another 14,502 sites on its network, 15.3%. Between them, two companies that started in Lithuania carry 57% of the living Lithuanian web.

The DNS layer is even more concentrated. Interneto vizija’s nameserver brand, serveriai.lt, answers for 41,700 .lt domains, and Hostinger’s parking service for another 14,544. Hostinger’s technology was also detected behind 9,492 Lithuanian WordPress sites, so even a Lithuanian site served from abroad often runs on Lithuanian-built infrastructure.

Geographically, 68.1% of the Lithuanian sites whose real location is visible are served from Lithuania (52,615 of 77,243). Germany is second with 8,534 and, unusually for the region, Ukraine third with 7,295. Only 18.6% of the Lithuanian web hides its location behind a relay network such as Cloudflare, against 31.3% in Latvia.

The report’s hosting chapter says what this means without alarm: one company at 41.7% of a national web is efficient and patchable in bulk, and it is also a single point of national failure. An outage at one Lithuanian host is, on these numbers, a two-fifths outage of the country’s web.

Guarded against AI, open to forgery

This is the contradiction the report named, and it is what a Lithuanian business owner is most likely to be able to fix.

Lithuania is the strictest about model training. 18% of reachable Lithuanian sites refuse training crawlers, the highest share in the region, while only 5% refuse the crawlers chat assistants use to fetch a page and cite it. Most of that is a default rather than a decision: the blocks ship with CDN and security products, and Cloudflare alone was detected on 17,769 Lithuanian sites. Whether to keep the training block is a fair choice either way, and the piece on blocking these crawlers sets out both sides.

Lithuania is the easiest to impersonate by email. 89% of live Lithuanian domains receive mail, the most in the region. 3% are actually protected against spoofing, meaning both standard records, SPF and DMARC, are in place and the DMARC policy enforces something. 71.8% have no DMARC record at all, so nothing stops anyone sending mail in their name. And of the Lithuanian domains that did publish one, 77.9% left the policy on “none”, which watches forged mail and does nothing about it. That is the highest monitor-only share in the Baltics.

Lithuania barely signs its domains. DNSSEC, a signature on a domain’s address records that stops anyone quietly redirecting its visitors, is on 2% of .lt domains. Estonia signs 22% and Latvia 12%. The same host concentration that makes a country’s web patchable in bulk could switch this on in bulk too, and in Lithuania it has not.

The rest of the picture

Speed is middling, and still poor. The median Lithuanian homepage needs 6.33 seconds to show its main content on a phone. Google defines a good LCP as 2.5 seconds or less: 18% of Lithuanian sites clear it, and 68% sit in the band Google calls poor. 16% of Lithuanian sites are wider than a phone screen, so the visitor scrolls sideways. The regional picture is in the six-second web.

The homepages say more, and label less. The median Lithuanian homepage carries 337 words, the most in the region, and the median title runs 37 characters, also the longest. Yet 45.1% of homepages have no meta description, so Google writes the search snippet itself, and 39.8% have no main heading. Only 19.3% tell search engines that a page exists in other languages, the lowest share of the three.

Consent is installed and ignored. 71% of Lithuanian sites set cookies before the visitor agrees to anything. The audit found a consent tool on 7,844 Lithuanian sites, more than in Latvia and Estonia, and 7,007 of them still set cookies before anyone clicks.

More of it has stopped moving. On 14.3% of the Lithuanian sites showing a copyright year in the footer, the year is 2020 or older. Of the sitemaps that carry dates, 18.0% have no entry newer than 2024, the most in the region. Slider Revolution, a homepage slider plugin from another era of web design, is still on 5,241 Lithuanian sites.

What you can check on your own .lt site, and what needs a developer

Five checks need no developer and take a few minutes each:

• Read your DMARC record. Use our DMARC checker or look up the TXT record at _dmarc.yourdomain.lt. No record means nothing stops a forged sender. p=none means you are watching and not blocking. The DMARC piece explains how to read it.
• Ask your host about DNSSEC. A free DNSSEC lookup tool shows whether your domain is signed today. If it is not, ask whoever runs your domain’s DNS to sign it; the request needs no code from you.
• Search for your own company name. If the text under your result is a jumble of menu items, you have no meta description. Every SEO plugin and site builder has a field for it. Write two sentences that say what you do and for whom.
• Watch your own cookie banner. Open the site in a private window and do not click the banner. If the browser’s developer tools already list analytics or advertising cookies, the banner is decoration. Cookies before consent walks through the check.
• Check what your shop tells Google. Paste a product page into Google’s Rich Results Test. If no product appears in the result, search engines and chat assistants cannot read your price and stock.

What genuinely needs a developer is the rest. Moving DMARC from “none” to enforcement without losing real mail is a staged job that starts with reading the reports. Adding product markup that stays correct as prices and stock change means touching the shop’s templates. Wiring a consent tool so scripts actually wait for a click means changing how each script loads. And getting a 6.3 second page under 2.5 is rarely one setting: it is images, fonts, scripts and server response measured on a real phone, which is what our speed optimization work covers.

Why we can say any of this

The figures come from a near-census rather than a sample. We measured 293,806 of the 306,872 Baltic domains in our frame across July and August 2026, from one fixed location, with a crawler that identified itself honestly on every request. Everything is published as an aggregate and no individual site is named beside a weakness. The method and every chapter quoted here are in the Baltic Web Audit. The Estonian side of the same comparison is in the state of the Estonian web.

If you run a Lithuanian site and would rather know than guess, send us the address and we will tell you where it stands on each of these measures.