Retail security reports

B

Baitukas

baitukas.lt

48

Baitukas.lt is a well-established Lithuanian e-commerce retailer specializing in computer games, gaming consoles, and computer hardware. The website offers a broad catalog of products including PlayStation, Xbox, Nintendo consoles, PC gaming accessories, and related peripherals. The business targets gamers and technology consumers primarily in Lithuania, leveraging an online sales model with features such as pre-orders, wishlists, and customer accounts. The domain has been active since 2001, indicating a mature market presence. Technically, the site is built on WordPress with WooCommerce, enhanced by popular plugins like Yoast SEO and Select2 for improved user experience. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Analytics and marketing tools include Google Analytics and Facebook Pixel, enabling moderate user tracking. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No incident response or security policy information is published. Overall, Baitukas.lt presents a professional and trustworthy e-commerce platform with solid technical foundations but requires enhancements in privacy compliance and security header implementation to strengthen its security posture and regulatory adherence.

S

SIA Rūjienas Saldējums

rujienassaldejums.com

57

SIA Rūjienas Saldējums is a small Latvian company specializing in the production and retail of traditional Latvian ice cream. The company emphasizes local ingredients, sustainability, and authentic flavors, targeting general consumers interested in quality local food products. The website is professionally designed using the Squarespace platform, featuring clear branding and consistent content that supports the company's market position as a local specialty food producer. Contact information and social media presence are well established, enhancing customer engagement and trust. Technically, the website leverages modern web technologies including Squarespace CMS, Google Analytics for visitor tracking, and Typekit fonts for typography. The site is mobile optimized and performs moderately well, with good SEO practices evident in meta tags and structured data. However, some technical security enhancements such as enabling DNSSEC and HSTS headers are missing, which could improve domain and transport security. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. The absence of a privacy policy and terms of service pages, however, indicates gaps in compliance and transparency. Cookie consent is implemented with an opt-in mechanism, aligning with GDPR requirements to some extent. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website presents a trustworthy and professional front for a small local business with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing comprehensive privacy and terms policies, enabling DNSSEC and HSTS, and adding incident response contacts to strengthen trust and compliance.

T

Elektronikas veikals online Latvijā - Selena-L

travel.selenal.lv

57

Selena-L is an established Latvian online electronics retailer offering a wide range of products including computers, components, monitors, and software. The website targets consumers in Latvia and the Baltic region, emphasizing 27 years of company experience and providing delivery services across the Baltics. The site features a modern design built with Vue.js and integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security-wise, the site enforces HTTPS and includes CSRF tokens in forms, but lacks explicit privacy and cookie policies, which are important for GDPR compliance. WHOIS data could not be retrieved due to query limits, but the domain creation date aligns with the site's meta information. Overall, the site presents a professional and trustworthy e-commerce platform with room for improvement in privacy compliance and security header implementation.

V

Verana Cosmetics

veranacosmetics.com

48

Verana Cosmetics is a newly established Latvian e-commerce business specializing in natural and organic cosmetics designed for various skin care needs. The website presents a professional and consistent brand image focused on ecological and ethical values such as no animal testing and paraben-free products. The technical infrastructure is based on OpenCart CMS with modern JavaScript libraries and Google Analytics integration, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced DNSSEC and security headers. Privacy compliance is basic with visible privacy and cookie policies and consent mechanisms. Contact information is comprehensive with multiple channels including phone, email, and social media. However, the presence of hidden suspicious external links related to cryptocurrency wallets may pose SEO or security concerns. Overall, the website is functional and trustworthy for its business purpose but could improve security and compliance transparency.

R

Racecar interneta veikals

racecar.lv

63

Racecar.lv is a Latvian online retail platform specializing in automotive spare parts and accessories for cars, trucks, and motorcycles. The website offers a comprehensive catalog of products including oils, batteries, lighting, car care products, lubricants, and more, targeting vehicle owners and automotive professionals in the region. The platform supports vehicle-specific product searches, enhancing user experience and relevance. Technically, the site employs modern JavaScript frameworks and integrates analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. It uses HTTPS and reCAPTCHA to secure user interactions. However, the absence of visible cookie consent mechanisms and terms of service pages indicates partial privacy compliance. The WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site demonstrates a solid e-commerce presence with room for improvement in privacy and security transparency.

R

Rotu Veikals

rotuveikals.lv

10

RotuVeikals.lv is a Latvian-based jewelry retailer specializing in a wide range of jewelry products including earrings, rings, necklaces, leg chains, and wedding jewelry. The company operates both an online e-commerce platform and a physical store located in Riga, targeting customers seeking quality and stylish jewelry. The website is professionally designed with good branding consistency and offers a user-friendly shopping experience supported by WooCommerce and WordPress technologies. Customer trust is reinforced through visible reviews and social media presence. Technically, the website leverages modern web technologies such as WordPress CMS, WooCommerce for e-commerce, jQuery, and Slider Revolution for dynamic content. SEO is enhanced with Yoast SEO plugin, and GDPR compliance is addressed with cookie consent mechanisms and a comprehensive privacy policy. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and integrates Google reCAPTCHA to mitigate spam. However, it lacks advanced security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data limits domain trust verification, but the website content and contact information suggest a legitimate business. Overall, RotuVeikals.lv presents a trustworthy and professional online presence for a small retail jewelry business in Latvia. Strategic improvements in security practices and transparency could further enhance its risk posture and customer confidence.

B

Bazaar Bakery

bazaarbakery.com

50

Bazaar Bakery is a small local bakery business based in Riga, Latvia, specializing in affordable and high-quality baked goods including pastries, cakes, and rolls. The website showcases their product offerings with detailed descriptions and images, targeting general consumers looking for fresh bakery products. The business appears newly established in 2023, consistent with the domain registration date. Technically, the website is built on WordPress using WooCommerce and Elementor, integrating Google Analytics and CookieYes for cookie consent management. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and anti-spam measures, though some HTTP security headers are missing and DNSSEC is not enabled. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service pages. Contact is provided via a web form without direct emails or phone numbers. Overall, the website is professional and trustworthy for a small retail bakery but could improve privacy transparency and security headers.

A

Annivia Dog Wear

annivia.eu

73

Annivia Dog Wear is a small Latvian e-commerce business specializing in high-quality dog accessories such as leashes, collars, and harnesses. The company targets dog owners primarily in Latvia but also serves international customers. The website is built on the Shopify platform using the Dawn theme, indicating a modern and scalable e-commerce infrastructure. The site is well-structured, mobile-optimized, and includes essential business information such as privacy and cookie policies, demonstrating compliance with GDPR regulations. Security measures include HTTPS enforcement and hCaptcha integration to protect forms from abuse. However, no direct contact information or security incident response details are publicly available, which could be improved to enhance trust and transparency. Overall, the website presents a professional and trustworthy online presence for a niche retail business.

B

Preces Bērniem | Bērnu Preču Veikals | Preces Mazuļiem

babytrio.lv

51

Babytrio.lv is an e-commerce retailer specializing in baby and children's products, serving primarily the Latvian market. The website offers a broad range of products including strollers, car seats, baby care items, feeding accessories, bathing products, clothing, and toys. The platform is built on Magento 2, leveraging modern JavaScript frameworks and integrates multiple tracking and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Hotjar. The site is secured with HTTPS and employs Google reCAPTCHA to protect user interactions. However, the absence of a visible privacy policy and terms of service pages indicates gaps in compliance and transparency. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website presents a professional and user-friendly shopping experience with moderate technical and security maturity.

D

Dikers-Santehnika

dikers.lv

43

Dikers-Santehnika is a Latvian retail company specializing in plumbing, heating, and water supply products, operating for over 24 years. Their website serves as an e-commerce platform offering a wide range of products including heating elements, pumps, filters, and sanitary installations. The company targets professional contractors and retail customers within Latvia, providing delivery and customer support services. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO optimizations. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed privacy policies. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site is professional, trustworthy, and well-structured, though improvements in security policies and compliance documentation are recommended.

T

TIR SIA

tir.lv

10

TIR SIA is a Latvian small business specializing in the sale and rental of cash registers, printer repair, and professional servicing of RICOH office equipment. The company positions itself as a reliable partner for Latvian businesses requiring office technology solutions, offering fast delivery, installation, and maintenance services. The website is professionally designed, well-structured, and targets local businesses in Latvia. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits full domain trust assessment, but the website content and business information appear consistent and credible. Overall, the site demonstrates a mature digital presence suitable for its market niche.

Upyard is a small, Latvia-based company specializing in eco-friendly gardening products including raised garden beds, wooden houses, and sheds. The company targets both B2C gardening enthusiasts and B2B clients such as DIY retail chains across more than 15 countries. Their business model focuses on sustainable product design and partnerships with retailers. Technically, the website is built on WordPress with modern plugins and libraries such as Yoast SEO, Mapbox, and Contact Form 7, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The domain WHOIS data is privacy protected, which is common for small businesses, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Irbene.lv is an e-commerce retail website primarily targeting Latvian customers, offering a diverse range of products including automotive parts, home appliances, fashion accessories, and more. The website emphasizes fast and free delivery, secure online payments, and 24/7 online support, positioning itself as a convenient online shopping destination. The site is well-structured with clear navigation and a professional design, supporting a positive user experience. However, the lack of WHOIS data limits the ability to fully verify domain legitimacy and business registration details. Technically, the website uses common JavaScript libraries such as jQuery, WOW.js, and Swiper.js to enhance user interface and interactivity. The site appears mobile responsive and has basic SEO and accessibility features, though there is room for improvement in security headers and privacy compliance mechanisms. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and explicit incident response or security policies. The absence of cookie consent mechanisms and vulnerability disclosure policies suggests gaps in privacy compliance and security transparency. The website content is safe with no adult or questionable material detected, suitable for a general audience. Overall, the website presents a functional and moderately professional e-commerce platform with some security and compliance shortcomings. Strategic improvements in security posture, privacy compliance, and WHOIS transparency would enhance trust and reduce risk.

S

SIA "IMPORT LATVIA"

toyland.lv

62

Toy Land, operated by SIA "IMPORT LATVIA", is a Latvian-based distributor and retailer specializing in certified developmental children's products. The company operates a bilingual B2B and B2C e-commerce platform, targeting both businesses and consumers interested in educational toys and developmental materials. The website is professionally designed with clear navigation and multilingual support, enhancing accessibility for a diverse audience. Key services include product distribution, online retail, and partnership facilitation. The company maintains a credible market position within the children's retail sector in Latvia.

R

Regtime Ltd.

hello-botanica.com

48

Hello-Botanica.com is an e-commerce website specializing in the retail of herbal supplements and natural health products, focusing on adaptogens, tonics, and related categories. The business is relatively new, founded in 2023, and operates primarily in Latvia. The website uses Bitrix CMS and common web technologies to deliver a moderately performant and mobile-optimized user experience. Contact information is clearly provided, primarily via phone and contact forms, but no company emails are explicitly listed. Privacy policy exists but is basic, and cookie consent mechanisms are absent, which may impact GDPR compliance. Security posture is adequate with HTTPS and some security headers but lacks DNSSEC and advanced security policies.

M

MINISO CO.LTD

miniso.com

61

MINISO CO.LTD operates a large global retail brand specializing in lifestyle products with a strong focus on IP collaborations and franchising. The website presents a professional and consistent brand image, targeting a general audience interested in affordable, high-quality consumer goods. The company has a significant international presence with over 7,100 stores across 112 global markets. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Layui, hosted on Alibaba Cloud, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied, no exposed sensitive data, and no visible vulnerable libraries, but lacks explicit security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and privacy compliance are recommended.

J

Jūrmalas logi un durvis

jurmalasld.lv

42

Jūrmalas logi un durvis is a Latvian-based business specializing in the sale of windows and doors, targeting local consumers and businesses. The website serves as an e-commerce platform built on WordPress with WooCommerce, utilizing the Astra theme. The technical infrastructure includes modern web technologies such as jQuery and integration with Google Tag Manager and Klix Pay Later for payment facilitation. However, the site lacks comprehensive privacy and cookie policies, which are critical for GDPR compliance given its European location. Security headers are not detected, and no explicit contact information is provided, which may impact user trust and regulatory compliance. The absence of WHOIS data due to query limits restricts domain legitimacy verification, though the site content appears legitimate and safe. Overall, the website demonstrates basic digital maturity but requires improvements in security, privacy, and transparency to enhance trust and compliance.

W

Websoft

ziemsvetki.lv

39

The website 'ziemsvetki.lv' is a seasonal retail platform operated by Websoft, focusing on Christmas gifts and e-cards targeted primarily at Latvian consumers. The site offers promotional content and product listings related to the holiday season, leveraging a modest e-commerce and marketing model. The business appears to be a small-sized entity with a local market focus and consistent branding aligned with the parent company Websoft. Technically, the website employs a traditional tech stack including jQuery 2.2.4, Bootstrap, and Google Analytics for tracking. While the site is accessible and functional, it shows signs of moderate digital maturity with basic mobile optimization and SEO practices. The use of older JavaScript libraries and lack of advanced security headers indicate areas for technical improvement. From a security perspective, the site uses HTTPS but lacks explicit security headers such as CSP or HSTS. The absence of privacy and cookie policies suggests compliance gaps with GDPR and related regulations. Forms collect personal data with basic validation but no visible advanced security measures. No WAF or blocking mechanisms were detected, and no suspicious or adult content was found, indicating a safe user environment. Overall, the website scores moderately on AI evaluation metrics, with strengths in business credibility and contact transparency but weaknesses in privacy compliance and security best practices. Strategic improvements in security headers, updated libraries, and privacy disclosures are recommended to enhance trust and compliance.

B

BRALU ALUS

bralualus.lv

53

BRALU ALUS is a Latvian e-commerce retailer specializing in the sale of beer and related beverages. The website targets adult consumers, implementing an age verification popup to restrict access to users 18 years or older. The business operates primarily in the retail sector, offering a variety of popular beer brands and related products through an online store with delivery options. The company maintains an active social media presence on Facebook and Instagram, enhancing customer engagement and brand visibility. Technically, the website is built on the Tilda CMS platform, utilizing Tilda's blocks, forms, and cart functionalities. The site employs modern web technologies including HTML5, CSS3, and JavaScript, and is hosted on Tilda's CDN infrastructure. Mobile optimization is good, and the site features a responsive design with video backgrounds and interactive product listings. However, accessibility features are basic, and SEO optimization is at a fundamental level. From a security perspective, the site uses HTTPS as indicated by resource URLs, but no explicit security headers such as CSP or HSTS were detected in the provided data. The presence of an age verification mechanism is a positive control for compliance with alcohol sales regulations. No advanced WAF or bot protection mechanisms were identified, and no sensitive data exposure was found in the HTML content. Privacy and cookie policies are absent, indicating a gap in compliance with GDPR and related privacy regulations. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security best practices. The lack of WHOIS data limits the ability to fully assess domain legitimacy and registration consistency. The business appears legitimate and focused on a niche retail market in Latvia. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and SEO to strengthen trust and compliance.

S

Sauja Dimantu

saujadimantu.lv

66

Sauja Dimantu is a Latvian-based e-commerce retailer specializing in gold-plated and hypoallergenic jewelry products including earrings, rings, bracelets, necklaces, and gift sets. The website targets a general audience seeking quality jewelry that is allergy-friendly and durable. Positioned as a niche player in the jewelry retail market, the company leverages Shopify's platform to deliver a streamlined shopping experience with fast delivery and simplified returns. The site is localized primarily in Latvian with English support, enhancing accessibility for a broader audience. Technically, the website is built on Shopify, utilizing a modern tech stack including JavaScript, jQuery, and several third-party apps for reviews (Judge.me), marketing (Klaviyo), and analytics (Lucky Orange). The site is hosted on Shopify's CDN infrastructure, ensuring fast load times and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers as provided by Shopify. Privacy compliance is supported by a visible cookie consent banner and a linked privacy policy that aligns with GDPR requirements. However, explicit security policies, incident response plans, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Overall, the website presents a professional and trustworthy online retail presence with moderate to high security posture and good privacy practices. The lack of WHOIS data limits domain trust analysis, but the use of Shopify and absence of suspicious indicators support legitimacy. Strategic recommendations include publishing security policies, enhancing accessibility, and providing clearer contact information to strengthen trust and compliance.

D

Ziedu veikals Kuldīgā - Debesu Dārzi

debesudarzi.lv

53

Debesu Dārzi is a local flower shop based in Kuldīga, Latvia, offering a variety of floral products including bouquets, flower boxes, wedding flowers, funeral floristry, and decorative gifts. The business targets general consumers in the local region seeking fresh and elegantly arranged flowers with delivery options. The website is built on the Mozello CMS platform and utilizes Amazon Cloudfront CDN for content delivery, incorporating common JavaScript libraries such as jQuery and Fancybox for enhanced user experience. The site is mobile optimized and presents a professional, consistent brand image with active social media engagement on Facebook, Instagram, and Pinterest. Security-wise, the website employs HTTPS and a cookie consent banner, but lacks advanced security headers and explicit security policies. No WHOIS data was retrievable due to query limits, but the domain appears legitimate with no suspicious indicators. Overall, the site demonstrates a moderate security posture and good privacy compliance, suitable for a small retail business.

H

HARV IMPORTS & EKSPORTS

harv.lv

39

HARV IMPORTS & EKSPORTS is a small Latvian retail business operating since 2003, specializing in the sale of new and used household goods, furniture, clothing, and footwear imported primarily from the Netherlands and other European countries. The company targets local and regional customers in Latvia, offering a variety of products including branded apparel and garden equipment. The website reflects a basic digital presence with essential business information and contact details, including a Facebook page and embedded Google Maps location. Technically, the site uses standard web technologies such as HTML, CSS, JavaScript, and jQuery, with Google Analytics for visitor tracking. However, the site lacks modern CMS or advanced frameworks and shows limited mobile optimization and accessibility features. Security posture is minimal, with no visible security headers or privacy policies, and WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

SIA XIVITAE operates a professional e-commerce website specializing in hair fall prevention products enriched with placenta extract, targeting consumers seeking hair care solutions. The company appears to be a small business founded in 2020, with a niche market focus and a consistent brand presence supported by social media channels. The website is built using modern technologies including the Astro framework and hosted on Hostinger, with a Zyro e-commerce platform integration. The site demonstrates good design quality, mobile optimization, and basic SEO practices, although navigation clarity could be improved. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

J

Jolanya Handmade

jolanyahandmade.lv

54

Jolanya Handmade is a small Latvian e-commerce business specializing in handmade linen and cotton clothing and accessories for children and adults. The website offers a variety of textile products including garments, home textiles, and gift sets, targeting customers interested in traditional and natural fabric products. The business maintains an active social media presence across multiple platforms, enhancing its market reach and customer engagement. Technically, the website is built on the Mozello CMS platform, utilizing common JavaScript libraries such as jQuery and Fancybox, and is hosted with Amazon Cloudfront CDN for content delivery. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Google Analytics and Engaga tracking scripts are used for analytics and marketing purposes. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism, but lacks important security headers and a publicly accessible privacy policy. No WHOIS data was retrievable due to query limits, which limits full domain legitimacy assessment. The site does not expose sensitive data and has no visible vulnerabilities, but could improve security posture by adding security headers and formal vulnerability disclosure information. Overall, the website presents a trustworthy small business with a niche market focus, but improvements in privacy transparency and security best practices are recommended to enhance trust and compliance.

Asummetria is a small retail e-commerce business specializing in luxury underwear and lingerie, emphasizing comfort and fashion. The website is built on WordPress with WooCommerce and uses modern marketing and review tools such as Judge.me, Klaviyo, and Facebook Pixel. The technical infrastructure is solid with HTTPS enabled and Cloudflare DNS used, though some security headers and DNSSEC are missing. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. The security posture is moderate with room for improvement in vulnerability disclosure and security policies. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

M

MotoBaysport - Motociklų aksesuarai, motociklai, keturračiai ir jų servisas

moto-baysport.lt

33

MotoBaysport is a Lithuanian-based retailer specializing in motorcycles, ATVs, and related accessories, including protective gear and apparel. Founded in 2020, the company operates an e-commerce platform powered by PrestaShop, targeting motorcycle and ATV enthusiasts primarily in Lithuania and the Baltic region. The website supports multiple languages and offers a range of products and services including vehicle servicing. The business maintains a consistent brand presence with clear contact information and a privacy policy, though lacks some compliance elements such as cookie consent and terms of service pages. Technically, the website uses modern e-commerce technologies including PrestaShop CMS, Google Tag Manager for analytics, and YouTube embeds for content. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, but could be improved by adding explicit security headers and incident response information. Overall, the website is professional and trustworthy with a good business credibility score. However, it would benefit from enhanced privacy compliance and security transparency to better align with GDPR and industry best practices. There is no evidence of WAF or content blocking, and the domain registration data is consistent and legitimate. Strategic recommendations include implementing cookie consent mechanisms, publishing terms of service and security policies, enhancing security headers, and improving accessibility to strengthen user trust and compliance.

D

DENOIL SIA

denoil.lv

53

DENOIL SIA operates as a specialized retail business in Liepāja, Latvia, focusing on automotive oils, lubricants, and related auto products. The company offers a wide range of products including oils for various machinery, filters, technical fluids, spare parts, and tires, targeting both private and corporate customers. Their market position is that of a local trusted supplier with personalized customer service and free delivery for large orders within the region. Technically, the website is built on the Tilda CMS platform, leveraging Tilda's CDN and JavaScript libraries for a modern and responsive user experience. The site is well-structured with clear navigation and mobile optimization, though accessibility features are basic. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and a published privacy policy. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website presents a professional and trustworthy front for a small local business with room for improvement in security and compliance documentation.

B

Best Balloons

best-balloons.com

58

Best Balloons is a small Latvian retail business specializing in helium balloons and balloon decorations with delivery services in Riga, Jūrmala, and surrounding areas. The website is built on the Tilda CMS platform and offers an e-commerce model with online catalog, contact forms, and shopping cart functionality. The business targets general consumers looking for balloon decorations for events such as birthdays, weddings, and other celebrations. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience.

O

OZOKO

ozoko.lv

62

OZOKO is a Latvian company specializing in the sale of wood materials and related products, targeting both B2B and individual customers. Their offerings include a wide range of timber products, garden materials, thermal wood, and auxiliary materials, complemented by services such as tool rental, painting, and delivery. The company positions itself as a reliable local supplier with a focus on quality and customer service. Technically, the website is built on the Webflow platform, utilizing modern web technologies and integrated with Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, while HTTPS is presumably enabled (not explicitly confirmed), there is a lack of visible security headers and no incident response or vulnerability disclosure information, indicating room for improvement in security posture. Privacy compliance is addressed with cookie consent and privacy policy presence, reflecting GDPR awareness. Overall, the website is legitimate and professional, but enhancing security practices and transparency would strengthen trust and compliance.

R

Roadmap Rugs

roadmaprugs.com

62

Roadmap Rugs is an early-stage business with an online presence currently limited to a 'Launching Soon' placeholder website. The site is built using GoDaddy's Website Builder platform and hosted by GoDaddy.com, LLC. The website includes a contact form protected by Google reCAPTCHA and a cookie consent banner, but lacks critical business information such as privacy policies, terms of service, and direct contact details. The domain registration is recent and consistent with the website's development stage. Technically, the site uses modern web fonts and standard web technologies but lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. Overall, the website is functional but minimal, reflecting a nascent business presence.

B

Big Green Egg Eesti

eggveikals.lv

43

The website eggveikals.lv is an e-commerce platform specializing in the retail sale of Big Green Egg kamado grills and related accessories, targeting consumers in Latvia. The site operates on the PrestaShop platform and features a product catalog with detailed descriptions and images. The technical infrastructure includes standard web technologies and integrations with Google Tag Manager and YouTube APIs for analytics and media content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification. Overall, the site presents a professional retail presence but would benefit from enhanced privacy compliance and security best practices.

Serving Baltics is a small family-owned business specializing in professional shelf maintenance and marketing services across the Baltic states. With over 15 years of experience working with retail chains, the company positions itself as a trusted partner focused on personalized client relationships and business growth support. The website is built on WordPress with common plugins and technologies, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible business with room for improvement in security and compliance documentation.

L

Piedāvājam LED diožu lampiņu virtenes

ledvirtenes.lv

51

The website www.ledvirtenes.lv is an e-commerce platform specializing in the sale and distribution of LED string lights and decorative lighting products primarily targeting the Latvian market. The business positions itself as one of the largest distributors in this niche within Latvia, offering a variety of LED lighting products and holiday decorations with a focus on competitive pricing and fast delivery through partnerships such as OMNIVA parcel lockers. The site content is in Latvian and emphasizes customer service and product availability. Technically, the website is built on the Mozello CMS platform and leverages Amazon Cloudfront CDN for content delivery. It uses common JavaScript libraries such as jQuery and Fancybox, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile optimized with a responsive design and basic accessibility features. However, there is room for improvement in SEO and security headers implementation. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data was available due to query limits, which limits the ability to fully verify domain legitimacy. The site does not expose sensitive data and uses secure forms for login and registration, but lacks documented security policies or incident response contacts. Overall, the website presents a legitimate small retail business with a moderate security posture and basic privacy compliance. Strategic improvements in privacy policy transparency, security header implementation, and WHOIS data availability would enhance trust and compliance.

©

© Incom-90 Ltd.

yellow.lv

42

Yellow.lv is an established Latvian online retail store specializing in professional and home cleaning equipment, prominently featuring Kärcher products. The website targets both professional cleaning companies and home users, offering a broad catalog of cleaning machines, accessories, and consumables. The business model is e-commerce retail with features such as customer registration, order tracking, and multilingual support. Structured data embedded in the site confirms the company name as Incom-90 Ltd., located in Riga, Latvia, with clear contact phone numbers and a physical address, supporting business credibility. Technically, the website employs a traditional web stack with jQuery and jQuery UI libraries, Google Fonts, and Google Analytics for tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured data. However, accessibility and mobile optimization could be improved. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the HTML content. No privacy or cookie policies were found, indicating potential compliance gaps. The security evaluation shows no immediate vulnerabilities or exposed sensitive data in the HTML. However, the absence of privacy and cookie policies and lack of security headers suggest areas for improvement. The WHOIS data could not be retrieved due to query limits, limiting domain registration trust analysis. Nonetheless, the website content and structured data indicate a legitimate business operation. Overall, yellow.lv presents as a professional and functional e-commerce platform with room for enhancement in privacy compliance and security best practices. Strategic improvements in these areas would strengthen trust and regulatory adherence.

B

BuvCom.lv

buvcom.lv

60

BuvCom.lv is a Latvian e-commerce platform specializing in the retail of building materials, plumbing supplies, tools, heating, ventilation, workwear, and garden products. The website targets construction professionals, contractors, and DIY consumers within Latvia, offering a broad catalog of products organized into detailed categories and subcategories. The business operates primarily online, positioning itself as a regional niche leader in the Latvian construction retail market. Technically, the website is built on the EcomCart platform and utilizes modern web technologies including jQuery, Owl Carousel, Google Tag Manager, Google Analytics, and Klaviyo for marketing and analytics. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts to improve user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of a published security policy or incident response contact limits transparency in security governance. Overall, the website presents a professional and trustworthy front for its business operations. The lack of WHOIS data due to query limits restricts full domain legitimacy analysis, but the use of privacy protection is typical and justified for commercial entities. No adult or NSFW content is present, and no WAF or blocking mechanisms interfere with content accessibility. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and continuing to monitor third-party scripts for vulnerabilities.

Mājaspasaule.lv is a Latvian e-commerce retailer specializing in plumbing access panels including revision, wall, and floor hatches. The website targets local customers in Latvia, offering niche products primarily for plumbing and construction needs. The business operates a small-scale online retail model with a focused product catalog. Technically, the site is built on the OpenCart CMS platform using the Journal3 theme, incorporating modern frontend libraries such as Bootstrap, Font Awesome, and Google Fonts. The site is mobile-optimized and uses HTTPS, indicating a baseline level of digital maturity. Security posture is moderate with HTTPS enabled and no visible sensitive data exposure; however, security headers and formal policies are missing, which are areas for improvement. The absence of WHOIS data due to query limits restricts full domain legitimacy verification. Overall, the site is functional and professional but lacks comprehensive privacy and security compliance documentation.

S

SIA tirdzniecības uzņēmums ”SANSI”

sansi.lv

41

SANSI is a Latvian retail and service company specializing in equipment sales, installation, servicing, and project planning. The website targets Latvian customers and provides multilingual support in Latvian, Russian, and English. The business appears to be a small-sized local player with a focus on retail and related services. The website infrastructure relies on older JavaScript libraries such as jQuery 1.9.1 and jQuery UI 1.10.3, along with the Nivo Slider plugin and Google Fonts. The site shows basic mobile optimization and moderate performance but lacks modern CMS or advanced frameworks. Security posture is moderate with HTTPS implied but no visible security headers and use of outdated libraries posing potential risks. Privacy and cookie policies are absent, indicating low privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional but requires modernization and improved security and privacy practices.

SIA „Emin Dārzam” operates as a specialized distributor of garden products in Latvia, offering a wide range of seeds, fertilizers, plant protection products, and gardening accessories. The company targets both wholesale and retail customers, positioning itself as a trusted supplier of both European and Latvian-made garden goods. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to gardening professionals and enthusiasts in Latvia. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, and various UI libraries, along with Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with fast loading times and clear product categorization. Privacy and cookie policies are implemented with GDPR compliance in mind, including a consent mechanism. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks explicit HTTP security headers and a public vulnerability disclosure policy. No WHOIS data was available due to query limits, limiting domain registration trust verification. However, the contact information and business details on the site appear legitimate and consistent with the business claims. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further enhance trust and compliance.

B

BERNUVEIKALS.LV

bernuveikals.lv

57

BERNUVEIKALS.LV operates as a prominent online retail store specializing in children's products, serving primarily the Latvian market and the broader Baltic region. The website offers a wide range of products including strollers, car seats, feeding chairs, toys, and children's furniture, targeting parents and caregivers. It positions itself as one of the largest children's online stores in the Baltics, emphasizing care for infants and their families. The business model is e-commerce retail with a medium-sized market presence. Technically, the website is built on the OpenCart CMS platform, utilizing modern web technologies such as Google Tag Manager, Google Analytics, Facebook Pixel, jQuery, and Swiper.js for interactive elements. The site is mobile-optimized with responsive design and good SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR principles. However, explicit privacy policy and terms of service pages were not detected, and security headers are not evident in the provided data. The WHOIS data could not be retrieved due to query limits, limiting domain trust verification. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the analyzed content. Overall, the website demonstrates a professional and trustworthy e-commerce presence with good business credibility and technical implementation. Strategic improvements in privacy documentation, security headers, and incident response transparency are recommended to enhance compliance and security posture.

L

LaserArt - Metāla sienas mākslas paneļi/Dekori, Mājdzīvnieku barotavas

laserart.lv

50

LaserArt is a Latvian e-commerce retailer specializing in metal wall art panels and pet feeders. The website targets pet owners and home decor enthusiasts, offering a niche product range with options for custom individual designs. The site is well-structured, mobile-optimized, and uses modern JavaScript libraries and CDN-hosted assets to deliver a good user experience. However, the absence of visible privacy and terms of service policies and lack of WHOIS data limit full trust verification. Security posture is moderate with HTTPS enabled but missing security headers. Cookie consent is implemented, indicating some privacy awareness.

F

Food Bouquet

foodbouquet.eu

50

Food Bouquet is a small local retail business based in Riga, Latvia, specializing in food products. The website is built on the Wix platform and primarily targets local consumers, with content presented in Russian. The business appears to operate in the retail sector with a focus on food sales. Technically, the website uses Wix's Thunderbolt framework and standard JavaScript polyfills, hosted on Wix infrastructure. Performance and mobile optimization are moderate to good, but SEO and accessibility are basic. Security posture is limited, with no detected security headers or published security policies, and WHOIS data is unavailable due to privacy restrictions, which slightly reduces trust. Privacy and cookie policies are absent, indicating potential compliance gaps. Overall, the website is functional but lacks advanced security and compliance features.

Izbraukumatirdznieciba.lv is a Latvian-based platform operated by SIA UNTITLED that coordinates street and mobile trade events, public catering, and craft fairs. The website serves as a hub for event organizers and vendors, providing administrative and technical support for various trade events across Latvia. The platform targets artisans, small businesses, and the general public interested in participating in or attending these events. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries, delivering a responsive and user-friendly experience. However, the site lacks explicit privacy and cookie policies, and no WHOIS data is available due to query limits, which limits full trust verification. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced compliance and security transparency.

M

Maģijas Mirklis

magijasmirklis.lv

59

Maģijas Mirklis is a small family-owned business based in Latvia specializing in gypsum 3D hand sculptures and related artistic products. Founded in 2018, the company operates an e-commerce platform built on WordPress and WooCommerce, offering both studio services and home-use 3D casting kits. The website demonstrates a good level of digital maturity with modern plugins, multilingual support, and integrated analytics and advertising tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear consistent and trustworthy. Overall, the site provides a professional user experience with clear contact information and active social media engagement.

L

Loft Ladders ltd

loftladders.ltd

65

Loft Ladders ltd is a small retail business specializing in home improvement products, particularly loft ladders and insulation materials. The company claims over 20 years of experience serving customers in Northern Ireland, positioning itself as a trusted regional provider. The website is built using GoDaddy's Website Builder and hosted by GoDaddy.com, LLC, reflecting a modest but functional digital presence. The site offers a shopping cart, contact form with reCAPTCHA, and basic navigation, catering primarily to homeowners and contractors in the region. Technically, the site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and reCAPTCHA but lacks DNSSEC and security headers. Privacy compliance is basic, relying on external Google policies without a dedicated privacy or cookie policy on the domain. Overall, the site is legitimate and trustworthy but could benefit from enhanced security and privacy practices.

D

Dižzīles

dizziles.lv

52

Dižzīles is a Latvian small retail e-commerce business specializing in seeds for flowers, herbs, vegetables, and related gardening products. The website presents a well-structured and visually consistent platform targeting gardening enthusiasts and professionals in Latvia. The technical infrastructure leverages Mozello CMS with Amazon Cloudfront CDN and standard JavaScript libraries including jQuery and Google Analytics for tracking. The site is mobile optimized and provides basic SEO and accessibility features. Security posture is moderate with HTTPS enforced but lacks important security headers and advanced form protections. Privacy and cookie policies are present but basic, with no explicit GDPR compliance mechanisms beyond cookie consent. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website is functional and professional but could improve security and compliance transparency.

S

SIA Rehavita

rehavita.eu

40

Rehavita is a Latvian-based small e-commerce retailer specializing in rehabilitation and developmental products such as compression socks, kinesiology tapes, sensory toys, and related therapeutic aids. The website is professionally designed with clear navigation and product presentation targeting consumers seeking health and developmental support products. The technical infrastructure includes common web technologies like jQuery, PhotoSwipe, and Google Analytics, with HTTPS enforced ensuring secure communication. However, some security best practices such as security headers and incident response information are missing, which could be improved to enhance security posture. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected and a legitimate business presence.

T

TEXX

texx.lv

72

TEXX is a Latvian-based e-commerce retailer specializing in workwear and personal protective equipment. The website offers a broad catalog of products including jackets, trousers, shirts, shoes, gloves, and accessories tailored for workers and companies focused on workplace safety. The business targets both individual consumers and corporate clients, providing custom pricing and additional services such as printing and embroidery. The company positions itself as a regional specialist in the workwear retail sector with a clear focus on quality and safety.

C

CJSC ChPZ Vostok

komandirskie.lv

48

Komandirskie.lv is an e-commerce website specializing in the retail of Russian mechanical watches, including the Komandirskie and Amphibian series, along with related bracelets and accessories. The business targets watch enthusiasts and collectors seeking durable, historically significant timepieces. The website is built on the OpenCart CMS platform and employs common web technologies such as jQuery, Bootstrap, and Owl Carousel to deliver a responsive and visually appealing user experience. While the site includes product listings, blog content, and clear contact information, it lacks comprehensive privacy and security policies, which impacts its overall trustworthiness. The presence of cookie consent indicates some privacy compliance effort, but no privacy policy or terms of service pages were found.

Bariba24 is a Latvian small business operating an e-commerce website specializing in animal feed and pet care products. The company, legally named NUTRICON SIA, offers a variety of products including dog food, poultry feed, vitamins, and electric fencing equipment. The website targets farmers, pet owners, and animal care professionals primarily within Latvia. The business model is retail-focused with an online sales channel supported by a Voog CMS platform. Technically, the website uses modern web technologies including jQuery, Voog Ecommerce scripts, and responsive design elements. While the site is mobile-optimized and has basic SEO features, there is room for improvement in accessibility and performance optimization. The site is hosted on Voog's platform, with no detected WAF or blocking mechanisms, allowing full content access. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy, cookie, or terms of service policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, indicating a low maturity in security governance. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the presence of company contact details and social media links supports a moderate trust level. Overall, Bariba24 presents as a legitimate small business with a functional e-commerce presence but requires enhancements in privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

S

Styleprint

styleprint.lv

61

Styleprint.lv is a small Latvian e-commerce business specializing in printing services including large format printing, stickers, phone cases, banners, and posters. The website is built on the Shopify platform, leveraging modern web technologies and third-party apps for enhanced user experience and analytics. The site is well-secured with HTTPS and appropriate security headers, and it includes customer testimonials and social media presence to build trust. However, the absence of explicit privacy and cookie policies, as well as lack of vulnerability disclosure or incident response information, indicates areas for compliance and security improvement. Overall, the website presents a professional and functional online storefront for its niche market.