Latvia security reports

A

AS Unions

himenejs.lv

48

Himenejs is an e-commerce retail website specializing in luxury Lladró porcelain and Gerstner jewelry products, targeting consumers interested in high-end decorative and jewelry items. The business operates primarily in Latvia and presents itself as a niche luxury retailer with a physical presence in Riga. The website offers product catalogs, discounts, special offers, and personal account management features for customers. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and Google services such as Maps and reCAPTCHA to enhance user experience and security. The site is mobile-optimized and provides a multilingual interface in Latvian, Russian, and English. Security posture is moderate with HTTPS enforced and reCAPTCHA protecting forms, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is professional and functional with room for security and privacy improvements.

L

Latvijas Ornitoloģijas biedrība

lob.lv

48

Latvijas Ornitoloģijas biedrība is a Latvian non-profit organization dedicated to ornithology, bird protection, and environmental education. The website serves as a hub for news, events, and resources related to birdwatching and nature conservation in Latvia. It targets bird enthusiasts, environmentalists, and the general Latvian public interested in nature. The organization operates primarily through memberships, donations, and partnerships with related environmental entities. The website is well-branded and professionally presented, reflecting a trusted position in its niche. Technically, the website is built on WordPress with WooCommerce and several plugins for SEO and social sharing. It uses modern web technologies and is mobile-optimized, though performance is moderate. The site embeds Google Calendars and maps for event and location information. SEO practices are good, with proper meta tags and structured data. However, some security headers are missing, and cookie consent mechanisms are not implemented, which could be improved for compliance. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure. The lack of security headers and cookie consent are notable gaps. No WHOIS data was available due to query limits, but the site shows strong legitimacy signals including official registration number, contact details, and active social media presence. Overall, the site is trustworthy and serves its community well. Recommendations include implementing security headers, adding cookie consent for GDPR compliance, and maintaining regular updates to WordPress and plugins to enhance security and privacy compliance.

L

Latvijas Motosporta federācija

lamsf.lv

51

Latvijas Motosporta federācija (LaMSF) is a voluntary, public organization uniting legal entities related to motorsport and motorcyclist movements in Latvia. The federation aims to represent and develop motorsport activities nationally and internationally. The website serves as an information hub for news, events, and organizational details related to Latvian motorsport. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, and it integrates Google Analytics for visitor tracking. The site is mobile-optimized and uses HTTPS for secure communication. Security posture is moderate with SSL enabled and cookie consent implemented, but lacks explicit privacy policy and security headers. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site is professional, content-rich, and trustworthy for its target audience of motorsport enthusiasts and organizations in Latvia.

V

VBE

vbe.lv

53

VBE is a Latvian professional service company specializing in measurement and electric motor repair services. The website presents a clear business focus with a professional design and localized content targeting Latvian customers. The company positions itself as a reliable and experienced provider with certified specialists, emphasizing quality service delivery. Technically, the website is built on the Wix platform, leveraging standard Wix technologies and Google Tag Manager for analytics. The site is mobile-optimized and uses HTTPS, ensuring basic security and user experience standards. However, the absence of visible privacy and cookie policies, security headers, and WHOIS data limits the overall trust and compliance posture. Security practices are basic but adequate for the business type, with no evident vulnerabilities or exposed sensitive data. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

S

SIA "Epic Frog"

epicfrog.com

66

EpicFrog is a Latvia-based custom software development and design company established in 2009. They offer a broad range of services including web and mobile development, product design, cloud development, machine learning, quality assurance, and DevOps. The company targets businesses seeking professional software solutions and emphasizes a flexible, agile development process. Their market position is that of a specialized, professional service provider with a versatile technology stack and experienced team. Technically, the website is built using modern frameworks such as React, Laravel, Vue.js, and Symfony, hosted likely on AWS infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security measures include HTTPS, CSRF tokens, and Google reCAPTCHA on forms, though DNSSEC is not enabled and security headers are not explicitly detected. From a security perspective, the site demonstrates a moderate security posture with room for improvement in DNS security and HTTP headers. Privacy compliance is lacking due to the absence of a privacy policy and terms of service. Contact information is clearly provided, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in privacy compliance and security hardening would enhance trust and reduce risk.

S

SIA “Augu Māja”

lakstos.lv

59

SIA “Augu Māja” operates the website lakstos.lv, a local Latvian flower delivery and retail business focused on serving Riga and its surrounding areas. The company offers flower delivery services, floristry for weddings and funerals, exclusive vases, design decor, gifts, and a wide selection of live plants. The website positions itself as a trusted local provider with clear contact information, social media presence, and a professional online storefront built on WordPress and WooCommerce. The business appears to be small-sized and founded around 2016, targeting general consumers in the retail flower market. Technically, the website is built on a mature and widely used CMS platform (WordPress) with WooCommerce for e-commerce functionality. It uses popular plugins such as WPBakery Page Builder and Slider Revolution for content presentation. The site is HTTPS secured, mobile optimized, and includes SEO best practices such as meta tags and structured data. Analytics tracking is implemented via Google Analytics, although the MonsterInsights plugin is not fully configured. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks advanced security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration trust verification, but the visible business information and website content suggest legitimacy. Overall, lakstos.lv is a professionally maintained small business website with good content quality, adequate technical implementation, and basic privacy compliance. Security posture is moderate with room for improvement in headers and incident response transparency. The site is safe for general audiences and does not contain adult or questionable content.

Tadeo.lv is a Latvian legal services website representing a small legal office offering juridical services to individuals and companies. The website is built on WordPress using the OnePress theme and several common plugins including Contact Form 7 and Easy Fancybox. It supports multilingual content in Latvian, English, and Russian. The site presents a professional but basic online presence with limited content and no visible privacy or cookie policies. Technical infrastructure is standard for a small business WordPress site, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important HTTP security headers and formal security policies. No WHOIS data was available due to query limits, but no suspicious indicators were found in the site content. Overall, the site is legitimate but could improve transparency and compliance.

M

Mīksto mēbeļu pārvilkšana

parvilksana.lv

53

The website www.parvilksana.lv represents a small local business specializing in upholstery and repair of soft furniture, including services such as sofa reupholstering, chair reupholstering, spring replacement, foam replacement, rubber reinforcement, and frame repair. The business is based in Riga, Latvia, as indicated by the structured data and contact information. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard Wix hosting infrastructure. It integrates common analytics tools such as Google Analytics and Facebook Pixel for user tracking and marketing purposes. Security-wise, the site uses HTTPS, but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies or consent banners. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and structured data suggest a legitimate small business. Overall, the site demonstrates moderate technical maturity with room for improvement in privacy compliance and security best practices.

L

Latvijas Maiznieku biedrība

maizniekubiedriba.lv

44

Latvijas Maiznieku biedrība is a professional association representing bread and bakery product manufacturers in Latvia. The organization focuses on uniting industry stakeholders to achieve common goals, promote traditional Latvian bread, and support educational and professional development activities. The website serves as an information hub with news, events, and resources relevant to the baking sector. Technically, the website is built on WordPress using popular plugins such as LayerSlider and Slider Revolution, providing a modern and responsive user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible incident response contacts. Privacy and cookie policies are not evident, indicating potential compliance gaps. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

S

SIA MoTra

jolly.lv

56

Jolly.lv is a Latvian e-commerce retailer specializing in women's and men's bags and accessories, including backpacks, handbags, wallets, and gift sets. The company positions itself as the leading online store in Latvia for these products, emphasizing competitive pricing, fast delivery, and customer satisfaction. The website is professionally designed, localized primarily in Latvian with Russian language support, and features clear navigation and comprehensive product categories. Payment partnerships with major banks and payment processors enhance customer trust. Technically, the website is built on the Magento platform, utilizing modern JavaScript libraries such as RequireJS, jQuery, and Knockout.js. It employs Google Tag Manager for analytics and tracking, and uses Google Fonts for typography. The site is mobile-optimized and demonstrates good SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses secure cookie settings. However, HTTP security headers are not detected, and there is no public security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy and cookie policies are present and appear GDPR compliant, supporting user consent mechanisms. Overall, Jolly.lv presents a trustworthy and professional e-commerce presence with a solid technical foundation. The lack of WHOIS data due to query limits limits domain registration verification, but the business information and web presence support legitimacy. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance the site's security posture and user trust.

Beloteks Latvia SIA operates as a specialized supplier of telecommunications and network infrastructure products, focusing on network hardware, copper and fiber optic cabling, UPS systems, and related accessories. The company targets business customers and professionals in the telecommunications and electrical installation sectors primarily in Latvia. The website serves as a product catalog and e-commerce platform, offering a range of technical products with a basic but functional online presence. Technically, the website is built on a custom or proprietary CMS platform using standard web technologies such as JavaScript, CSS, and HTML. It is hosted under a reputable registrar and uses HTTPS with valid SSL certificates, ensuring secure communication. However, the site lacks advanced security headers and DNSSEC, which are recommended for enhanced security. The website performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. From a security perspective, the site demonstrates basic security hygiene with HTTPS and domain transfer protection but lacks published privacy, security, or incident response policies. The cookie consent mechanism is present but minimal. No contact information or social media presence is provided, which limits direct communication and trust signals. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website presents a moderate risk profile with no critical security issues detected but notable gaps in privacy compliance and security best practices. Strategic improvements in policy publication, security headers, and contact transparency would enhance trust and compliance.

iVF Riga is a Latvian-based specialized healthcare provider focusing on stem cell banking and related medical services. The company operates the first national stem cell center in Latvia, offering collection, processing, storage, and preparation of umbilical cord stem cells for transplantation. Their market position is strong locally, supported by qualified personnel and modern technology. The website reflects a professional and trustworthy business with clear service offerings targeted at expectant parents and healthcare institutions. Technically, the site is built on TYPO3 CMS with a modern JavaScript stack, providing a responsive and user-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification, but the business information and online presence indicate legitimacy. Overall, the site is well-structured, compliant with privacy regulations, and effectively supports the company's business goals.

MERGO SERVISS is a small Latvian company established in 1999 specializing in the sale, installation, and maintenance of gas and heating equipment, as well as internal water supply and sewage systems. The company positions itself as a turnkey solutions provider with partnerships with major European equipment manufacturers. The website is multilingual, primarily in Russian, targeting local customers in Riga and Jurmala. Technically, the site is built on an outdated WordPress platform with legacy plugins and lacks HTTPS enforcement, which poses security risks. No privacy or cookie policies are present, indicating low privacy compliance. The absence of contact emails and phone numbers on the site reduces direct customer engagement opportunities. Overall, the business information is consistent with a small local energy sector service provider, but the digital maturity and security posture require significant improvements.

M

Magnat Group

magnatgroup.lv

61

Magnat Group is an established Latvian company with over 30 years of experience in port operations, international trade, and investment projects. The company operates multiple terminals at the Port of Riga and serves clients in over 20 countries, aiming to be a global partner for market entry and long-term partnerships. Their website reflects a professional business presence with clear service offerings and certifications. Technically, the site is built on WordPress with Elementor and Yoast SEO, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is professional, GDPR compliant, and business credible.

R

Riga Port Group

rigaport.lv

65

Riga Port Group is a leading Latvian company specializing in port asset management and rail freight services. Established in 2005, it operates as an infrastructure manager and service provider, offering stevedoring, rail freight forwarding, and utility services. The company highlights its strategic location with excellent land and sea connectivity, positioning itself as a preferred logistics partner in the region. The website reflects a professional digital presence with clear business descriptions and a user-friendly interface. Technically, the website employs modern web technologies including jQuery, Cookiebot for cookie consent management, Google Fonts, and Slick Slider for UI elements. The site is mobile-optimized and provides a moderate performance experience. However, explicit CMS or hosting details are not evident. SEO and accessibility features are basic but functional. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No advanced security headers or explicit privacy policies were found in the provided content, indicating room for improvement in security posture and compliance documentation. No vulnerabilities or suspicious elements were detected in the accessible content. Overall, the website presents a credible and professional business front with moderate technical maturity and privacy compliance. The absence of WHOIS data limits full domain trust assessment, but the content and branding suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and improving accessibility compliance.

Nordic Villages is a real estate development project focused on private housing villages with developed infrastructure near Pierīga, Latvia. The business is operated by SIA DOMUSS, a company with 24 years of experience in the Latvian real estate market and part of the US investment fund group NCH Capital. The website presents a professional image with clear business information, multiple contact options, and a focus on residential land and home sales. Technically, the site uses modern JavaScript libraries and Google services, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and reCAPTCHA protections, though some security headers are missing and WHOIS data is unavailable due to query limits, limiting domain trust verification. Privacy compliance is well addressed with cookie consent and a privacy policy in Latvian. Overall, the site is trustworthy and professionally maintained, serving a medium-sized real estate business in Latvia.

S

SIA «BALTIC BEARING COMPANY-RIGA»

bbcr.eu

10

Baltic Bearing Company (BBC-R) is a European manufacturer specializing in a wide range of bearing products produced in Latvia. Established in 2014, the company has positioned itself as a reputable manufacturer with a medium-sized operation and a network of distributors across Europe, including a subsidiary in Poland. The website reflects a professional business presence with detailed product catalogs, certifications, and multilingual support targeting industrial partners and distributors. Technically, the site is built on WordPress with modern plugins and SEO tools, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure form practices, though it lacks some security headers and explicit incident response policies. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

Agency Media Moderator (AMM) is a professional media and PR agency based in Riga, Latvia, specializing in luxury lifestyle and real estate publishing and advertising services. The company offers a full cycle of PR and advertising solutions, including unique publications and campaign management, targeting discerning clients in the Baltic region. The website is multilingual, primarily in Russian, with English and Latvian options, reflecting a regional focus. Technically, the site is built on WordPress with common plugins and libraries, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. WHOIS data is unavailable due to malformed responses, limiting domain trust verification. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

S

Senator

senator.lv

9

Senator is a Latvian small business specializing in custom built-in furniture including wardrobes, kitchen furniture, and sliding doors. The company offers design, manufacturing, and installation services targeting Latvian-speaking customers seeking tailored furniture solutions. The website is built on WordPress with common plugins and presents a professional and consistent brand image. Contact information and social media presence are clearly provided, supporting business credibility. Technically, the site uses modern web technologies and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating compliance gaps. Tracking via Google Analytics and Facebook Pixel is implemented without explicit cookie consent, which may pose privacy concerns. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the website is functional and trustworthy for its business scope but would benefit from enhanced privacy compliance and security hardening.

S

SIA DOBELES ŪDENS

dobelesudens.lv

10

SIA DOBELES ŪDENS is a municipally owned company providing centralized water supply and sewage services to Dobele municipality residents, institutions, and businesses. It operates as the sole provider of these services in the region, managing water extraction, treatment, supply, and sewage infrastructure. The website is built on WordPress with a modern plugin ecosystem supporting multilingual content and user accessibility. The company maintains clear contact channels and complies with GDPR through a comprehensive privacy and cookie policy. Technically, the site is moderately performant and mobile-optimized but lacks some advanced security headers. No WHOIS data was available due to query limits, but the domain and content align with a legitimate municipal utility provider.

A

AGmarket.lv

agmarket.lv

9

AGmarket.lv is an e-commerce retailer specializing in dietary supplements and health-related products, targeting the Latvian market. The website is built on the Shopify platform using the Ella theme and enhanced with PageFly page builder. It offers a range of nutritional supplements with a focus on wellness and healthy living. The site is professionally designed with good content quality and clear navigation, optimized for mobile users. However, explicit privacy and cookie policies are not found, which impacts compliance and user trust. The WHOIS data could not be retrieved due to query limits, limiting domain trust verification. The site integrates multiple marketing and analytics tools including Hotjar, Facebook Pixel, and MailerLite, indicating a moderate level of user tracking.

P

Pūces skola

pucesskola.lv

7

Pūces skola is a small educational institution based in Saulkrasti, Latvia, specializing in early childhood development and kindergarten services since 2008. The website provides detailed information about their offerings including thematic play activities, English language lessons, playgroups, and summer programs, targeting parents of young children. The business operates locally with a focus on Montessori-based educational methods and personalized child development. Technically, the website is built with basic HTML, CSS, and JavaScript, featuring image galleries and embedded Google Maps for location. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility. Performance is moderate with no advanced technical features detected. Analytics usage is minimal, relying on a local stats service. From a security perspective, the site does not present HTTPS status or security headers in the provided data, and no privacy or cookie policies are found, indicating low privacy compliance. No forms or incident response contacts are present, limiting data protection and security posture. The WHOIS data could not be retrieved due to query limits, restricting domain legitimacy verification. However, the site content and contact details suggest a legitimate local business. Overall, the website is functional and informative but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

S

SIA Funksjonell

funksjonell.lv

8

SIA Funksjonell is a small Latvian company specializing in the production of affordable quality wooden element houses, targeting families seeking ready-to-move-in homes primarily in Latvia and Norway. The website showcases their project portfolio and emphasizes affordability and quality. The company maintains an active social media presence and provides clear contact information, enhancing business credibility. Technically, the website is built using Mobirise Website Builder with Bootstrap and jQuery frameworks, delivering a responsive and visually appealing user experience. However, the site lacks advanced SEO and accessibility features and does not display privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS (assumed from modern standards though not explicitly confirmed), but no security headers or vulnerability disclosure policies are present. The absence of WHOIS data limits domain trust assessment, but the website content and contact details appear consistent with a legitimate small business. Overall, the security posture is moderate but could be improved with better headers, policies, and transparency. The overall risk is moderate with no critical issues detected. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture.

F

IPL fotoepilācija: 100% rezultāts

fotoepilacija-ipl.com

9

The website fotoepilacija-ipl.com is a Latvian-based service provider specializing in IPL (Intense Pulsed Light) hair removal treatments. It offers permanent hair removal solutions with guarantees and consultation services, targeting Latvian-speaking customers primarily in Riga. The business model is service-oriented, focusing on cosmetic healthcare with a small company size and a domain registered in 2020. The website content is professionally presented with good quality images, testimonials, and clear service descriptions. Technically, the site uses standard web technologies including Google Analytics and Facebook Pixel for tracking, but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is minimal, with a privacy policy available but no cookie consent mechanism or GDPR compliance indicators. Security posture is basic with HTTPS enabled but missing several best practices. Overall, the site is safe for general audiences and does not contain adult or explicit content.

P

Permanentais grims uzacīm, acīm, lūpām | Laimas Čakstiņas studija

permanentart.lv

9

Permanentart.lv is a small local Latvian business specializing in permanent makeup services including micropigmentation for eyebrows, eyes, and lips. The website presents a professional and consistent brand image targeting general consumers interested in beauty enhancement services in Riga and Jūrmala. The business operates primarily as a service provider with a local market focus. Technically, the site uses a CMS platform (Mozello) with multiple JavaScript libraries and CDNs to deliver a moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS usage implied but no advanced security headers or incident response information found. Social media presence across major platforms supports business credibility. Overall, the site is safe for general audiences and does not contain adult or explicit content.

D

DNS design

dnsdesign.lv

10

DNS design is a small Latvian design studio specializing in graphic, web, and animation design services with over 13 years of experience. The company targets businesses and individuals seeking professional design solutions, offering a broad range of services including digital marketing and web development. Their market position is that of an established, goal-oriented design agency with a professional team. Technically, the website is built on the Tilda CMS platform, leveraging modern web technologies and third-party services such as Google Analytics and Cookiebot for tracking and compliance. The site is mobile-optimized and presents a professional user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and professional, though the absence of WHOIS data and privacy policy pages limits full compliance assessment.

S

SIA "Silpec"

silpec.lv

7

SIA "Silpec" is a small Latvian manufacturing company specializing in timber processing, including drying, planing, sorting, and pole turning. Founded in 1996, the company has a local/regional market presence focused on wood products. The website provides basic business information and contact details but lacks comprehensive privacy, cookie, or security policies. Technically, the site uses HTTPS and Google Analytics but does not implement advanced security headers or privacy compliance mechanisms. The presence of unrelated external links to adult and gaming sites in the footer may negatively impact trust. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website is functional but basic in design and security posture.

R

RANITA SIA

ranauto.com

50

Ranauto is a Latvian-based small business specializing in automotive tuning accessories, operating both an e-commerce platform and a physical store located in Riga. The website offers a broad catalog of car parts and accessories, targeting vehicle owners and automotive enthusiasts primarily in Latvia. The business has been established since 2014, with a consistent domain registration and transparent company information. Technically, the website is built on a common e-commerce platform (likely OpenCart), using standard web technologies such as HTML5, CSS3, JavaScript, and integrates Google Translate and Facebook SDK for multilingual support and social engagement. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features.