High-risk security reports

S

SOMI NETWORKS

sominetworks.lt

28

SOMI NETWORKS is a Lithuanian-based company specializing in the sale and distribution of data network materials and equipment, including network cabinets, fiber optic cables, active network devices, UPS systems, and security solutions. The company maintains a multilingual e-commerce website targeting professional and business customers in Lithuania and neighboring regions. The website demonstrates a solid market position with a clear product catalog and active social media presence. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and integrations such as Google Analytics and Mailerlite for marketing and analytics. Security posture is generally good with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies are absent. Privacy compliance is partial due to the lack of a visible privacy policy and terms of service. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business objectives effectively.

U

UAB Profinas

profinas.lt

44

Profinas is a Lithuanian financial services company specializing in outsourced accounting, financial consulting, and legal assistance tailored to support business growth. The company positions itself as a personal financial department alternative, offering a three-step accounting system designed to provide comprehensive financial management at the cost of an average accountant. Their website reflects a professional and consistent brand image, targeting Lithuanian businesses seeking reliable financial support. Technically, the website is built on WordPress 4.9.24 with common libraries such as jQuery and MediaElement.js, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and uses HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. However, the WordPress version is outdated, which could pose security risks. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data limits domain trust verification, but the website content and contact information suggest a legitimate and established business. Overall, Profinas demonstrates a solid business presence with good content quality and privacy compliance. Strategic improvements in security headers, CMS updates, and transparency around security policies would enhance their security posture and trustworthiness.

M

MB MODOMEX

modomex.com

28

MB MODOMEX is a Lithuanian small business specializing in the preparation and administration of investment projects, primarily assisting clients in securing financial support including EU funding. The company presents itself as experienced and collaborative, targeting businesses seeking project financing solutions. The website is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, with moderate technical maturity and basic mobile optimization. However, the absence of HTTPS is a critical security flaw, exposing users to potential risks. The site lacks explicit privacy and cookie policies, which impacts compliance with GDPR and other regulations. Contact options are limited to a contact form and social media links, with no direct email or phone contacts visible. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual website. This page is displayed by the browser when it cannot load external website content, indicating that the target website is inaccessible or blocked. Consequently, no business information, privacy policies, contact details, or security configurations are present. The technical infrastructure is limited to Chromium's offline game code, with no external scripts or third-party integrations. Security posture is minimal due to lack of HTTPS and security headers. Overall, the site is not accessible for meaningful analysis, and the risk assessment is high due to the absence of any verifiable content or policies.

A

Alpen Pharma

alpenpharma.com

48

Alpen Pharma is a healthcare-focused pharmaceutical company with an international presence, operating multiple country-specific websites to serve diverse markets. The company appears established since 2007, with a medium-sized business footprint primarily in the healthcare sector. Their website is built on WordPress, leveraging common plugins for forms and GDPR-compliant cookie consent, indicating a moderate level of digital maturity. The technical infrastructure includes modern JavaScript libraries and analytics tools, supporting a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear policies and opt-in mechanisms. However, contact information and security policies are not explicitly presented, which could impact user trust and compliance transparency. Overall, the website is professional and functional with room for enhanced security and business transparency.

The website at eight-c.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content or metadata. The domain is registered with GMO Internet Group, Inc. d/b/a Onamae.com since June 2023, indicating a relatively new registration. Due to the lack of accessible content, no business description, contact information, or security policies are available for analysis. The technical infrastructure cannot be fully assessed, but the absence of HTTPS and security headers is a concern. Overall, the security posture is weak due to lack of visible protections and policies, and the site appears to be either under development or misconfigured. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, and providing contact and incident response information to improve trust and compliance.

A

Arvi - Naujienos, skelbimai ir pranešimai

arvi.lt

36

Arvi.lt is a Lithuanian language news and informational blog focusing on topics such as automobiles, financing, gardening, and lifestyle. The site targets Lithuanian-speaking users seeking news and advice in these areas. Technically, the website is built on WordPress 6.8.1 with modern front-end libraries like Swiper.js and FontAwesome, providing a good user experience with mobile optimization and SEO best practices. Security posture is decent with HTTPS enabled and no visible sensitive data exposure, but lacks important security headers and privacy compliance elements such as privacy and cookie policies. The absence of WHOIS data limits domain trust assessment, but the site content and structure indicate a legitimate small media blog. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.