Security Directory

U

UAB Profinas

profinas.lt

44

Profinas is a Lithuanian financial services company specializing in outsourced accounting, financial consulting, and legal assistance tailored to support business growth. The company positions itself as a personal financial department alternative, offering a three-step accounting system designed to provide comprehensive financial management at the cost of an average accountant. Their website reflects a professional and consistent brand image, targeting Lithuanian businesses seeking reliable financial support. Technically, the website is built on WordPress 4.9.24 with common libraries such as jQuery and MediaElement.js, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and uses HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. However, the WordPress version is outdated, which could pose security risks. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data limits domain trust verification, but the website content and contact information suggest a legitimate and established business. Overall, Profinas demonstrates a solid business presence with good content quality and privacy compliance. Strategic improvements in security headers, CMS updates, and transparency around security policies would enhance their security posture and trustworthiness.

M

MB MODOMEX

modomex.com

28

MB MODOMEX is a Lithuanian small business specializing in the preparation and administration of investment projects, primarily assisting clients in securing financial support including EU funding. The company presents itself as experienced and collaborative, targeting businesses seeking project financing solutions. The website is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, with moderate technical maturity and basic mobile optimization. However, the absence of HTTPS is a critical security flaw, exposing users to potential risks. The site lacks explicit privacy and cookie policies, which impacts compliance with GDPR and other regulations. Contact options are limited to a contact form and social media links, with no direct email or phone contacts visible. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual website. This page is displayed by the browser when it cannot load external website content, indicating that the target website is inaccessible or blocked. Consequently, no business information, privacy policies, contact details, or security configurations are present. The technical infrastructure is limited to Chromium's offline game code, with no external scripts or third-party integrations. Security posture is minimal due to lack of HTTPS and security headers. Overall, the site is not accessible for meaningful analysis, and the risk assessment is high due to the absence of any verifiable content or policies.

A

Alpen Pharma

alpenpharma.com

48

Alpen Pharma is a healthcare-focused pharmaceutical company with an international presence, operating multiple country-specific websites to serve diverse markets. The company appears established since 2007, with a medium-sized business footprint primarily in the healthcare sector. Their website is built on WordPress, leveraging common plugins for forms and GDPR-compliant cookie consent, indicating a moderate level of digital maturity. The technical infrastructure includes modern JavaScript libraries and analytics tools, supporting a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear policies and opt-in mechanisms. However, contact information and security policies are not explicitly presented, which could impact user trust and compliance transparency. Overall, the website is professional and functional with room for enhanced security and business transparency.

The website at eight-c.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content or metadata. The domain is registered with GMO Internet Group, Inc. d/b/a Onamae.com since June 2023, indicating a relatively new registration. Due to the lack of accessible content, no business description, contact information, or security policies are available for analysis. The technical infrastructure cannot be fully assessed, but the absence of HTTPS and security headers is a concern. Overall, the security posture is weak due to lack of visible protections and policies, and the site appears to be either under development or misconfigured. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, and providing contact and incident response information to improve trust and compliance.

I

IBS Lithuania, UAB

ibsettle.com

62

IBS Lithuania, UAB operates the ibsettle platform, providing fast, transparent, and reliable payment services primarily targeting businesses in Lithuania and the broader European market. Their offerings include business, cumulative, and personal accounts, SEPA and international payments, currency exchange, and flexible banking interfaces such as online banking and B2B APIs. The company positions itself as a leading innovative payment service provider with a strong regulatory foundation, holding an Electronic Money Institution license authorized by the Bank of Lithuania. Technically, the website employs modern web technologies including JavaScript frameworks (likely Vue.js), Google reCAPTCHA for bot protection, and responsive design principles ensuring good mobile optimization. The site is served over HTTPS with a cookie consent mechanism and integrates Google Analytics for user behavior insights. While the technical implementation is solid, there is room for improvement in accessibility and security headers. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot mitigation. However, it lacks publicly available security policies and incident response contacts, which are important for transparency and trust. The absence of WHOIS data for the domain is a concern but is mitigated by the presence of clear company information and regulatory licensing on the site. Overall, the ibsettle website presents a professional and trustworthy front for a regulated financial services provider. Strategic enhancements in security transparency and WHOIS data clarity would further strengthen its risk profile and stakeholder confidence.

A

Arvi - Naujienos, skelbimai ir pranešimai

arvi.lt

36

Arvi.lt is a Lithuanian language news and informational blog focusing on topics such as automobiles, financing, gardening, and lifestyle. The site targets Lithuanian-speaking users seeking news and advice in these areas. Technically, the website is built on WordPress 6.8.1 with modern front-end libraries like Swiper.js and FontAwesome, providing a good user experience with mobile optimization and SEO best practices. Security posture is decent with HTTPS enabled and no visible sensitive data exposure, but lacks important security headers and privacy compliance elements such as privacy and cookie policies. The absence of WHOIS data limits domain trust assessment, but the site content and structure indicate a legitimate small media blog. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

V

Van Merksteijn Steel Group B.V.

van-merksteijn.com

67

Van Merksteijn Steel Group B.V. is a well-established family-owned manufacturing company specializing in steel reinforcement products and fencing panels, serving clients primarily in Europe. The company positions itself as a market leader with a focus on quality, sustainability, and service excellence. Their website reflects a professional digital presence with multilingual support and multimedia content to engage their target audience of business partners and customers in the construction and manufacturing sectors. Technically, the website is built on WordPress with modern plugins and tools such as Gravity Forms, Google Tag Manager, and CookieYes for consent management, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent mechanisms in place, but lacks some advanced security headers and explicit security policies. The absence of WHOIS registration data is a notable concern for domain legitimacy verification, although the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and domain registration clarity.

T

The Florey Institute of Neuroscience and Mental Health

florey.edu.au

59

The Florey Institute of Neuroscience and Mental Health is a leading non-profit medical research organization based in Australia, specializing in brain and mental health research. It holds a prominent position as the largest brain research center in the Southern Hemisphere, focusing on advancing treatments for conditions such as dementia, epilepsy, and mental health disorders. The website effectively communicates its mission, research areas, and opportunities for engagement including donations and careers. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics, Google Tag Manager, Facebook Pixel, and Monsido for accessibility and heatmaps. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

N

NORSAN Deutschland

norsan.de

62

NORSAN Deutschland operates as a specialized e-commerce retailer focusing on premium Omega-3 supplements sourced from Norway, targeting health-conscious consumers in Germany. The website is built on a modern WordPress and WooCommerce stack with compliance plugins tailored for the German market, indicating a mature digital infrastructure. The presence of Borlabs Cookie and Google Tag Manager integrations demonstrates attention to privacy and marketing needs, although explicit privacy and terms of service documents are not detected in the provided content. Security posture is strong with HTTPS enforced and security hardening plugins in use, but could be improved with published security policies and enhanced HTTP headers. Overall, the website presents a professional and trustworthy front with good technical implementation and marketing capabilities.

C

CodeWizz

codewizz.com

59

CodeWizz is a small technology company specializing in web development services, including innovative websites and custom web applications. The company has been operating since 2013, with a consistent domain registration history and a focus on serving businesses seeking web development solutions. The website is built on WordPress and uses common web technologies such as jQuery, Bootstrap, and Google Analytics for tracking. The technical infrastructure includes Cloudflare DNS services, providing reliable hosting and DNS management. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the website presents a professional and functional online presence but would benefit from improved security and privacy practices.

S

SeaMar

seamar.nl

57

SeaMar is a Netherlands-based maritime service provider specializing in shipping, agency, vessel management, and guard vessel services primarily for the offshore and shipping industries. The company operates multiple subsidiaries and maintains a portfolio of reputable clients, positioning itself as a reliable regional player. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using the Salient theme, leveraging modern JavaScript libraries and Google analytics tools. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial with a basic privacy policy and cookie consent mechanism but no detailed cookie policy or GDPR compliance statements. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.