Retail security reports

E

ECOWORMS

ecoworms.eu

56

ECOWORMS is a small retail business specializing in fishing bait and related fishing goods, primarily serving customers in Latvia. The company operates both an online presence and a physical store located in Riga, Latvia. Their website is built on WordPress with WooCommerce, enhanced by popular plugins such as WPBakery Page Builder and Yoast SEO, indicating a moderate level of digital maturity. The site includes a contact form protected by Google reCAPTCHA and integrates Google Maps for location display, reflecting a user-friendly and functional technical infrastructure. Security measures include HTTPS enforcement and anti-spam protections, though additional security headers and explicit privacy policies are absent. Overall, the website presents a professional and trustworthy front for a local retail business, with clear contact information and a consistent brand identity.

V

Veselības Veikals

veselibasveikals.lv

58

Veselības Veikals is a Latvian-based e-commerce retailer specializing in health and wellness products including water ionizers, air ionizers, water filters, CBD products, and other health supplements. The website targets general consumers interested in exclusive health products and daily care items, positioning itself as a niche local retailer in Latvia. The business model is primarily online retail with a physical address in Riga, Latvia. The site is branded consistently and provides clear contact information including phone and physical address, supported by social media presence on Facebook and Instagram. Technically, the website is built on WordPress using the Astra theme and WooCommerce platform, enhanced with Elementor and Yoast SEO plugins. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and several security headers present, although there is room for improvement in privacy compliance and transparency. Security evaluation reveals no critical vulnerabilities or exposed sensitive data. However, the absence of a visible privacy policy and terms of service pages, as well as lack of WHOIS data due to query limits, reduces overall trustworthiness. Cookie consent mechanisms are implemented, indicating some GDPR awareness. Overall, the site is functional and professional but would benefit from enhanced compliance documentation and transparent domain registration details. Strategically, the business should focus on improving privacy and legal disclosures, enhancing accessibility, and maintaining up-to-date technical components to sustain security and trust. These steps will strengthen the company's market position and customer confidence in a competitive health product retail sector.

S

SIA DEBORALUX

paruka.lv

47

Paruka.lv is a Latvian-based retail and e-commerce business specializing in high-quality synthetic wigs. The company operates both a physical salon in Riga and an online store, targeting Latvian-speaking customers seeking natural-looking wigs. The website is professionally designed with clear navigation, multilingual support, and a focus on customer engagement through social media and newsletter subscriptions. Technically, the site is built on WordPress with WooCommerce, leveraging popular plugins for SEO, GDPR compliance, and social media integration. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the business presents a trustworthy and professional online presence suitable for its market niche.

S

SIA Bebra Serviss

baribas.lv

40

The website baribas.lv is an e-commerce platform operated by SIA Bebra Serviss, specializing in premium pet food products for dogs, cats, and livestock. The site targets Latvian pet owners, offering a range of well-known brands and veterinary diet products with free delivery in Riga. The business appears to be a small local retailer founded around 2019, with a consistent brand presence and a clear product catalog. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO plugins. While the site is mobile optimized and uses HTTPS with valid SSL certificates, it lacks comprehensive privacy and cookie policies, and Google Analytics is included but not fully configured. No WHOIS data was available due to query limits, limiting domain registration verification. Overall, the site presents a professional and trustworthy e-commerce experience but could improve privacy compliance and security headers.

T

Tresor Beauty

tresorbeauty.eu

64

Tresor Beauty is a small retail and service business operating a beauty salon in Āgenskalns, Riga, Latvia. The company offers a variety of beauty treatments including laser hair removal, waxing, hair care products, and other cosmetic services. Their website is built on the Shopify platform, leveraging modern e-commerce technologies and providing a good user experience with mobile optimization and clear navigation. The business maintains an active social media presence on Facebook and Instagram, enhancing customer engagement and brand visibility. However, the website lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security measures such as HTTPS and captcha protections are in place, but additional transparency on security policies and incident response would strengthen their posture. Overall, Tresor Beauty presents as a legitimate and professional local beauty service provider with room for improvement in privacy compliance and security transparency.

D

DZIIVA CACAO SIA

dziiva.com

62

DZIIVA CACAO SIA is a small Latvian company specializing in artisanal ceremonial cacao and chocolate products. The business operates an e-commerce platform built on Squarespace, offering organic cacao sourced from various countries and hosting workshops. The website is professionally designed with multilingual support and clear navigation, targeting consumers interested in health and ceremonial cacao experiences. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS and HSTS enabled, but lacks DNSSEC and formal privacy and terms policies. Overall, the site is trustworthy and functional but would benefit from enhanced compliance documentation and DNS security improvements.

B

BALTIC OVERLANDERS

balticoverlanders.eu

48

Baltic Overlanders is a specialized e-commerce retailer focused on providing high-quality car camping gear, rooftop tents, and accessories to customers primarily in Latvia, Estonia, and Lithuania. The company offers premium European brands such as James Baroud and Dometic, positioning itself as a regional leader in outdoor and overlanding equipment. Their business model includes direct product sales and a Rent-Try-Buy program, catering to outdoor enthusiasts and overlanders in the Baltic region. The website is professionally designed with a clear product focus and good user experience.

K

Katrīnas Modes nams

katrinasmodesnams.lv

45

Katrīnas Modes nams is a Latvian fashion retail business specializing in women's and children's clothing, lingerie, fabrics, and sewing accessories. The company offers both ready-made products and custom tailoring services, targeting a general audience within Latvia. The website is built on the Tilda CMS platform, leveraging Tilda's CDN for hosting and content delivery. It features e-commerce capabilities including a shopping cart, wishlist, and payment processing via Stripe. The site is well-designed with consistent branding and good navigation, optimized for mobile devices. Security posture is adequate with HTTPS enforced and secure payment integration, but lacks advanced security headers and explicit privacy or cookie policies. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website presents a professional and trustworthy online presence for a small retail business.

I

Italian Yarn from Italy near me

italianyarn.com

47

Italian Yarn from Italy near me is a small e-commerce retailer specializing in high-quality Italian wool yarn for both machine and hand knitting. The business operates an online store with a wide range of yarn products and offers worldwide shipping from its warehouse located in Latvia. The website is professionally designed with clear navigation and product categorization, targeting knitting enthusiasts and yarn buyers globally. Technically, the site is built on the Bitrix CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Tag Manager and Tawk.to for analytics and customer support. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site presents a trustworthy and professional front for a niche retail business.

A

Australian Gold Latvija

australiangold.lv

54

Australian Gold Latvija operates as a small-scale e-commerce retailer specializing in tanning creams, sun protection cosmetics, and related skincare products targeted at the Latvian market. The website presents a professional and consistent brand image with clear navigation and relevant content focused on their product offerings. The company leverages social media channels such as Facebook and Instagram to engage with customers and enhance brand visibility. Technically, the website is built on the Mozello CMS platform, utilizing common JavaScript libraries like jQuery and third-party services including Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is hosted with CDN support via Amazon Cloudfront, ensuring moderate performance and good mobile optimization. However, accessibility features are basic, and some modern security headers are missing. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating awareness of privacy regulations such as GDPR. Nonetheless, the absence of WHOIS data due to query limits restricts the ability to fully verify domain legitimacy and registrant information, which impacts trust evaluation. No explicit contact information or security incident response details are provided, which could be improved to enhance transparency and user trust. Overall, the website is functional, secure at a basic level, and compliant with privacy norms, but it would benefit from enhanced security headers, clearer contact details, and verified domain registration data to strengthen its security posture and business credibility.

V

Vapista

vapista.ee

48

Vapista.ee is an Estonian e-commerce retailer specializing in alternative tobacco products including e-cigarettes, capsule systems, and nicotine pouches. The website targets adult consumers interested in tobacco alternatives and provides professional advice alongside product sales. The business appears to be a small-sized specialist retailer founded in 2017, with a consistent brand presence and a focused market position within Estonia. Technically, the site is built on the Magento platform, leveraging common web technologies such as jQuery, Prototype.js, and Bootstrap, indicating a moderate level of digital maturity. The site is mobile optimized and includes SEO best practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the domain registration is consistent and legitimate, with no suspicious WHOIS data. The site’s content is safe but categorized as questionable due to the nature of tobacco-related products, targeting mature audiences. Strategic improvements in security headers, privacy transparency, and contact information visibility would enhance trust and compliance.

F

Fox In Black

foxinblack.lv

41

Fox In Black is a Latvian-based company specializing in promotional and business gifts, offering a wide range of products including personalized items and advertising materials. Their website is built on WordPress using popular themes and plugins, providing a professional and user-friendly experience tailored to business clients seeking customized gifts. The technical infrastructure is modern and includes standard tracking tools like Google Analytics. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and visible privacy policy documentation. The absence of WHOIS data limits full domain legitimacy verification, but the website content and structure suggest a legitimate and active business. Strategic improvements in privacy transparency and security hardening would enhance trust and compliance.

Elize.lv is a Latvian-based e-commerce website specializing in the sale of yarns, fabrics, laces, knitting and sewing needles, bed linen, and sewing accessories. The site targets hobbyists and crafters interested in textile and sewing products. The business operates as a small online retail store with a clear product catalog and multiple categories, serving primarily the Latvian market. The website is well-structured with good navigation and product organization, supporting a positive user experience. Technically, the site is built on Ruby on Rails, uses Amazon Cloudfront CDN for asset delivery, and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site employs HTTPS and standard security measures such as CSRF tokens, but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No WHOIS data was available due to query limits, limiting domain registration verification. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced privacy compliance and security transparency.

P

Pilsētas Barber

pilsetasbarber.com

62

Pilsētas Barber is a small retail and service business operating as a barbershop in Talsi, Latvia. The company offers personalized haircuts, beard corrections, and professional grooming products through both in-person services and an integrated e-commerce platform. The website is well-branded and targets local customers seeking quality grooming services. Technically, the site is built using Hostinger's Website Builder with Astro framework and Zyro e-commerce integration, supported by Google Analytics and Tag Manager for marketing insights. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS, security headers, and domain transfer protection, though DNSSEC is not enabled. However, the site lacks explicit privacy and cookie policies, which impacts GDPR compliance and privacy best practices. Contact information is clearly presented, including phone, email, and physical address, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security enhancements.

MebelOffer.lv is an established Latvian furniture retailer operating both an online store and physical showrooms in Riga. The company offers a wide variety of furniture products including sofas, beds, mattresses, and office furniture, targeting consumers and businesses within Latvia. Their business model combines e-commerce convenience with in-person consultation and showroom visits, supported by delivery services and warranty guarantees. Technically, the website is built on the OpenCart platform using common web technologies such as jQuery, Bootstrap, and tracking tools like Google Analytics and Facebook Pixel. The site is mobile responsive and well-structured, providing a good user experience. Security posture is moderate with HTTPS enabled but lacking advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data due to query limits limits full domain trust assessment, but the website content and contact information appear legitimate and professional. Overall, the site is safe, user-friendly, and credible but could improve in privacy compliance and security best practices.

S

Sportovesels.lv

sportovesels.lv

42

Sportovesels.lv operates as a specialized online retailer focused on sports equipment and fitness products primarily serving the Latvian market. The website offers a broad catalog ranging from home gym equipment to rehabilitation and professional sports gear, targeting both amateur and professional users. The business model is e-commerce retail with a clear emphasis on competitive pricing and product variety. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and a custom search widget, with responsive design and good SEO practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy and cookie policies are present, indicating GDPR compliance. The absence of WHOIS data limits full domain trust verification, but the website content and business presentation suggest legitimacy. Overall, the site is professional, user-friendly, and trustworthy for its target audience.

DreamYard (operated by SIA OUTDOOR LIVING) is a Latvian company specializing in outdoor living products including hot tubs, garden houses, pergolas, ceramic grills, and garden fireplaces. The website targets homeowners seeking to enhance their outdoor spaces with quality products sourced from Canada, Finland, and other reputable manufacturers. The company operates an e-commerce platform with additional inspirational content to engage customers. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS and Google reCAPTCHA on forms, but lack advanced security headers and explicit privacy or cookie policies. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site presents a professional and trustworthy front with room for improvement in privacy compliance and security transparency.

M

Masunglasses

masunglasses.eu

49

Masunglasses.eu is a small European e-commerce retailer specializing in sunglasses, sunglasses accessories, and winter accessories, with a physical store located in Riga, Latvia. The website is built on WordPress using WooCommerce and several plugins to enhance e-commerce functionality, including multilingual support for English and Latvian. The site presents a professional and consistent brand image with clear navigation and a good user experience. Social media presence on Facebook and Instagram supports brand engagement. Technically, the site uses modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is legitimate and trustworthy for its business scope but could improve security and privacy practices.

N

Nagla.lv

nagla.lv

43

Nagla.lv is a Latvian e-commerce retailer specializing in building materials such as plasters, primers, profiles, adhesives, and tile glue. The website targets local construction professionals and DIY consumers, offering a well-structured product catalog with pricing and shopping cart functionality. The business operates primarily in the retail sector within Latvia. Technically, the website uses modern JavaScript libraries including jQuery and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enabled and secure login forms, but lacks visible security headers and explicit privacy policy documentation. Cookie consent is implemented, indicating some level of privacy compliance. WHOIS data could not be retrieved due to query limits, but no suspicious indicators were found in the website content. Overall, the site is legitimate and functional but would benefit from enhanced security headers and privacy documentation.

S

SIA “Viking Gastro”

gastroviking.lv

38

SIA “Viking Gastro” operates the website gastroviking.lv, offering professional catering and kitchen equipment primarily targeting businesses in the hospitality and food service sectors in Latvia. The company provides a broad range of products including heating and cooling equipment, display cases, bar equipment, and bakery machinery. The website is built on the PrestaShop e-commerce platform, leveraging multiple modules to enhance user experience and product management. The technical infrastructure is modern and supports mobile responsiveness, though some accessibility and security header improvements are recommended. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and functional, suitable for its target B2B audience.

B

BeaA - Be At Home with Yourself

beaa.eu

69

BeaA is a small e-commerce retailer specializing in fashion apparel, focusing on comfort and style. The website is built on the Shopify platform using the Impulse theme and integrates several third-party marketing and analytics tools such as Facebook Pixel, Google Tag Manager, Hotjar, and Smartlook. The business targets fashion-conscious consumers seeking bundled product offerings and custom sizing options. The technical infrastructure is modern and leverages Shopify's CDN and payment systems, ensuring reliable performance and mobile optimization. Security posture is adequate with HTTPS enforced and use of hCaptcha for form protection; however, explicit security headers and comprehensive privacy policies are missing, which could be improved to enhance compliance and trust. Overall, the website presents a professional and trustworthy front with moderate risk, suitable for its business model.

B

BaibaRipa

baibaripa.com

62

BaibaRipa is a niche premium knitwear fashion brand with Baltic craft heritage, operating primarily as an e-commerce retailer via Shopify. The website presents a professional and consistent brand image targeting consumers interested in high-quality knitwear. The technical infrastructure leverages Shopify's platform with integrations for marketing and analytics including Google Tag Manager, Facebook Pixel, and Klaviyo, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and domain registrar protections in place, though improvements such as enabling DNSSEC and adding explicit security headers would enhance resilience. Privacy compliance is basic with privacy and terms pages present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, with room for security and privacy enhancements.

S

SKARULE SP

skarule.com

55

Skarule is a small Latvian fashion brand specializing in apparel and accessories inspired by Baltic nostalgia and traditional Latvian crafts. The company operates primarily through an e-commerce platform powered by Shopify, complemented by a showroom presence. The website is professionally designed with good content quality and clear navigation, targeting fashion consumers interested in unique, culturally inspired clothing. Technically, the site uses modern web technologies including Google Analytics and Mailchimp for marketing and tracking, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences, with room for improvement in security and privacy practices.

S

SIA Kristjansons

foodstacija.lv

47

Foodstacija.lv is a Latvian family-owned food delivery and takeaway business specializing in sushi, poke bowls, wok dishes, and burgers, primarily serving Jelgava, Ozolnieki, and surrounding areas. The website is built on Joomla CMS with UIkit and jQuery frameworks, featuring a modern and responsive design with clear navigation and multiple language options. The business presents itself professionally with clear contact information and policies, targeting local customers seeking convenient meal options. Technically, the site uses HTTPS and integrates Google Analytics and Google Tag Manager for tracking, but lacks some advanced security headers. The cookie consent mechanism and privacy policy indicate GDPR compliance awareness.

T

TRUFFLE BEE

truffle-bee.com

61

TRUFFLE BEE is a niche luxury table textiles manufacturer and online retailer, specializing in unique and elegant tableware and home decor products. The company targets consumers who appreciate eclectic design and joyful hosting experiences. The website is built on the Bitrix CMS platform and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Yandex Metrika. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are lacking. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website presents a professional and trustworthy e-commerce platform with room for security and privacy enhancements.

S

SIA SPGames

spgames.lv

54

SPGames.lv is a Latvian-based e-commerce retailer specializing in Russian-language board games, serving customers primarily in Latvia, Germany, Poland, and other European countries. The website offers a broad selection of games for various audiences including adults, families, and children, with clear product categorization and pre-order options. The business model focuses on online retail with delivery services via multiple courier and parcel locker providers. Technically, the site is built on the OpenCart CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Fonts, with integrations for Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site appears trustworthy and professionally managed, with room for improvement in security transparency and domain verification.

C

CossSpot

coss-spot.com

56

CossSpot is a Latvian retail business specializing in electronic cigarettes, vape devices, and nicotine liquids, operating both online and through physical stores across Latvia. The website is built on the Shopify platform using the Dawn theme, indicating a modern e-commerce infrastructure with moderate performance and good mobile optimization. The business targets adult consumers and vape enthusiasts, offering a wide range of products including salt nicotine and freebase e-liquids. The company was founded recently in 2022, consistent with the domain registration date. Security posture is generally good with HTTPS enforced and domain locked, though DNSSEC is not enabled and cookie consent mechanisms are absent. Privacy policy is present and GDPR compliance is partially addressed, but terms of service and explicit security policies are missing. Contact information is available via phone and contact form, but no direct company email was found. The site uses third-party marketing and review tools such as Judge.me and Automizely, supporting customer engagement and analytics. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

MedexyLV is a Latvian-based professional cosmetics and device distributor and retailer, offering a curated selection of skincare brands such as Sesderma, Keenwell, and Obagi. The website operates on the Shopify platform using the Dawn theme, indicating a modern and scalable e-commerce infrastructure. The site demonstrates good digital maturity with responsive design, clear navigation, and integration of customer review systems (Judge.me). Security posture is strong with HTTPS enforced and standard security headers present, although explicit incident response and vulnerability disclosure information are absent. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies and a consent mechanism. Overall, the site presents a professional and trustworthy online presence suitable for its target market.

E

Kosmētikas un parfimērijas internetveikals — Elitaroma

elitaroma.lv

50

Elitaroma.lv is an e-commerce website specializing in the retail of perfumes, cosmetics, and home fragrances primarily targeting the Latvian market. The website offers a variety of branded products and emphasizes customer satisfaction and quality. The platform is built on the Bitrix CMS framework and incorporates common web technologies such as jQuery and Bootstrap, along with analytics tools like Google Tag Manager and Yandex Metrika. Privacy and cookie policies are present, indicating compliance with GDPR regulations. However, WHOIS data for the domain is unavailable due to query limits, limiting the ability to fully verify domain legitimacy. The site is accessible without WAF or blocking mechanisms, and the content is safe for general audiences.

T

Thalissi Baltija

thalissibaltija.com

49

Thalissi Baltija is a small Lithuanian e-commerce business specializing in natural and organic cosmetic products, emphasizing holistic beauty and artisanal processes. The website is built on PrestaShop and uses modern web technologies such as jQuery and Revolution Slider, hosted by HOSTINGER operations, UAB. The site offers a professional user experience with clear product information and navigation, targeting consumers interested in natural beauty products. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Social media presence on Facebook and Instagram supports brand trust. Overall, the website is legitimate and professionally maintained, with room for improvement in security and privacy practices.

T

Auto rezerves daļu interneta veikals TopAutoDalas

topautodalas.lv

45

TopAutoDalas.lv is a Latvian e-commerce platform specializing in the sale of automotive spare parts for a wide range of car brands. The website offers a comprehensive catalog of parts, fast delivery across Latvia, and competitive pricing, targeting vehicle owners and automotive repair professionals within the Latvian market. The business model is retail-focused, leveraging an online storefront to reach customers efficiently. The site is well-branded and provides essential contact information, including a physical address and phone number, enhancing its credibility. From a technical perspective, the website employs modern JavaScript libraries such as jQuery, LightGallery, Tooltipster, and Select2 to enhance user experience. It is mobile-optimized with good navigation and SEO practices. The site uses HTTPS, ensuring encrypted communication, and integrates analytics tools like Google Analytics and Facebook Pixel for marketing and user behavior tracking. However, some security best practices such as implementing security headers and providing explicit incident response contacts are missing. Security posture is moderate with no critical vulnerabilities detected in the visible content. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the presence of consistent contact details and professional content supports trustworthiness. Overall, the website presents a professional and functional e-commerce platform with room for improvement in security hardening and transparency around incident response. The risk level is moderate, with recommendations focusing on enhancing security headers, adding incident response information, and continuous monitoring of third-party libraries.

Z

Zīmogu birojs 703

703.lv

44

Zīmogu birojs 703 is a Latvian small business specializing in the manufacture of stamps, plaques, and promotional materials with over 25 years of experience. The company offers a range of products including Trodat stamps, engraved plaques, business cards, and printing services. Their market position is that of a local trusted provider serving businesses and individuals in Latvia. The website is built on WordPress and integrates common technologies such as Google Fonts, Google Maps API, and Slider Revolution for a professional presentation. Contact information is clearly provided, including phone, email, and physical office location, supporting business credibility. However, the absence of privacy and cookie policies indicates a gap in compliance and transparency.

B

Blue Box

bluebox.lv

53

Blue Box is a Latvian-based solarium studio chain offering tanning services and related cosmetic products across multiple locations in Latvia. The website presents a professional and consistent brand image with clear service listings and active social media presence. The technical infrastructure leverages Mozello CMS, Amazon CloudFront CDN, and common JavaScript libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though advanced security headers are missing. Privacy policies are present and indicate GDPR compliance. However, the absence of WHOIS data limits domain trust verification. Overall, the website is safe, professional, and suitable for its target audience.

N

Metālizstrādājumi

nometala.lv

34

Nometala.lv is a Latvian e-commerce website specializing in the sale of metal products such as waste bins, bicycle racks, benches, canopies, flagpole holders, mailboxes, and other outdoor accessories. The site targets both general consumers and businesses requiring durable metal products for outdoor and household use. The platform is built on PrestaShop, featuring a professional design with clear navigation and mobile responsiveness. It integrates Google Analytics and Tag Manager for user tracking with IP anonymization to enhance privacy. However, the absence of explicit privacy and cookie policies, as well as the lack of WHOIS data due to query limits, slightly diminishes trust and compliance posture. The website maintains a good security posture with HTTPS and some security best practices but lacks comprehensive security headers and vulnerability disclosure information.

M

MARVELS LTD

avemar.lv

58

AVEMAR, operated by MARVELS LTD, is a Latvian-based retailer and wholesaler specializing in high-quality decorative finishing materials sourced from Italy, Germany, and Korea. The company offers a broad product range including decorative paints, microcements, Italian frescos, concrete materials, waterproofing solutions, PVC flooring, and electronic bidet covers. Additionally, AVEMAR provides professional services such as architectural, technological, design, and decorator consultations, positioning itself as a comprehensive solution provider in the decorative construction materials market. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive contact options, reflecting a mature digital presence.

B

Brandmart

brandmart.lv

53

Brandmart is a Latvian retail company specializing in discounted brand name American and European clothing for women, men, and children. The company operates physical stores in Riga and maintains an online presence showcasing new inventory weekly. Their market position focuses on providing authentic designer styles at affordable prices, targeting a broad family audience. Technically, the website is modern, mobile-optimized, and fast-loading, utilizing JavaScript modules and Google Fonts, with embedded Google Maps for store locations. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable due to query limits, but the website's content and contact information suggest legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

T

Termovela

termovela.lv

60

Termovela.lv is an e-commerce retail website specializing in thermal clothing for men, women, and children, primarily targeting the Latvian market. The website offers a variety of thermal wear products from well-known brands such as Viking, Kari Traa, and Odlo. The business operates on the Shopify platform, leveraging its robust e-commerce infrastructure to provide a seamless shopping experience. The site includes comprehensive privacy, cookie, and terms of service policies, indicating a commitment to regulatory compliance and customer trust. Technically, the website utilizes modern web technologies including Shopify Liquid templates, Google Tag Manager, Facebook Pixel, and lazy loading for images to optimize performance. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Security posture is strong with HTTPS enforced and hCaptcha implemented on forms to prevent abuse. However, explicit security headers and incident response information are not clearly published. Overall, the website presents a professional and trustworthy front for a small retail business. The lack of WHOIS data limits full domain legitimacy verification, but the use of Shopify and presence of standard compliance policies support a positive risk assessment. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure and incident response contacts, and improving accessibility compliance. This assessment positions Termovela.lv as a credible and secure online retailer with room for incremental security and compliance enhancements to further strengthen customer trust and regulatory adherence.

Astra velo is a specialized bicycle retail company operating primarily in Riga, Latvia, offering a wide range of bicycles, accessories, equipment, and apparel. The website positions itself as one of the newest and largest specialized bicycle stores in the region, targeting general consumers interested in cycling products. The business model is e-commerce focused, supported by a Magento 2 platform with integrated marketing and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site demonstrates good digital maturity with GDPR compliance and cookie consent mechanisms in place. Technically, the website uses a modern Magento 2 stack with RequireJS, jQuery, and various third-party modules for GDPR and tracking. The site is mobile-optimized and has good SEO practices, although accessibility features could be enhanced. Security posture is solid with HTTPS enforced and reCAPTCHA on forms, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-structured for its retail purpose. However, the absence of WHOIS data due to query limits restricts full domain legitimacy assessment. There is no evidence of security incident response or vulnerability disclosure policies, which could be improved to enhance trust. The content is safe for general audiences with no adult or questionable material. Strategic recommendations include implementing comprehensive security headers, publishing security and incident response policies, enhancing accessibility, and conducting regular security audits to maintain a strong security posture.

S

SIA ZELT BIO

zelt.bio

63

SIA ZELT BIO operates the largest single-variety organic sea buckthorn garden in Latvia, offering a range of high-quality sea buckthorn products aimed at nutrition, beauty, and health markets. The company maintains an e-commerce platform with subscription options, experience tours, and events, targeting general consumers interested in organic and health-related products. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a trustworthy online retail presence. Technically, the site leverages modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA Enterprise for bot protection, reflecting a moderate to good digital maturity level. Security posture is adequate with HTTPS enforced and anti-bot measures in place, though additional security headers and explicit security policies could enhance protection. Privacy compliance is basic but present, with cookie consent and a privacy policy in Latvian. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious indicators are found. Overall, the site presents a low-risk profile with good business credibility and technical implementation.

M

Motocikluveikals.lv

motocikluveikals.lv

44

Motocikluveikals.lv is a specialized motorcycle retail business based in Riga, Latvia, offering a wide range of new and used motorcycles, scooters, and related accessories. The company targets motorcycle enthusiasts and buyers in Latvia, providing a broad brand portfolio and financing options such as leasing. The website reflects a small-sized retail operation with a focus on customer service and product variety. Technically, the website is built on the OpenCart CMS platform and leverages modern frontend technologies including jQuery, Bootstrap, UIkit, and various UI enhancement libraries. It integrates Google Tag Manager and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and published security policies. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. The absence of WHOIS data limits domain legitimacy verification, though the site presents clear contact information and social media presence, supporting moderate trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and domain registration transparency to improve trust and security posture.

G

Gitana TN, SIA

gitana.lv

53

Gitana TN, SIA operates a professional e-commerce platform (gitana.lv) specializing in the sale of electric, pneumatic, hydraulic, and hand tools, as well as cleaning equipment and tool repair services. The website targets businesses and professionals in Latvia, offering a broad catalog of products and business client services. The company appears to be a medium-sized regional retailer with a consistent brand presence and a well-structured online store powered by PrestaShop. Technically, the website employs modern web technologies including Google Tag Manager and Stripe for payments, and it is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a legitimate business. Privacy compliance is basic with cookie consent but no explicit privacy policy found in the provided content. Overall, the website is professional, secure, and credible with room for enhanced privacy and security disclosures.

Siberian Wellness (Siberian Health) is a well-established international company specializing in natural health and beauty products. With over 28 years of experience and operations in more than 60 countries, the company offers a broad portfolio of over 300 original products. Their business model includes direct sales and an e-commerce platform, targeting consumers interested in wellness and natural products globally. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, ensuring good performance and mobile optimization. The infrastructure appears robust, though the hosting provider is not explicitly identified beyond the domain registrar. SEO and accessibility are well addressed, contributing to a positive user experience. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks some advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent mechanisms are missing. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy and professional, with minor areas for security and privacy enhancement. The domain registration data supports the legitimacy of the business, showing a long-standing presence consistent with the company's claims.

S

Saal Digital Fotoservice GmbH

saal-digital.lv

61

Saal Digital Fotoservice GmbH operates a professional e-commerce platform specializing in high-quality photo products such as photo books, wall art, prints, and calendars. The company targets professional photographers and quality-conscious consumers, offering a broad product range with a strong emphasis on craftsmanship and fast delivery. The website is well-designed, mobile-optimized, and integrates modern technologies including TYPO3 CMS, Google Tag Manager, Facebook Pixel, and Usercentrics for consent management. Despite the lack of WHOIS data due to query limits, the website's content, branding, and customer testimonials indicate a reputable and established business with a history dating back to 1981. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, the site presents a professional and trustworthy digital presence with moderate tracking and advertising transparency.

A

Alpenheat Baltija, SIA "Elia group"

alpenheat.lv

54

Alpenheat Baltija, operated by SIA Elia group, is a specialized retailer based in Latvia offering a range of heated footwear dryers, insoles, clothing, and accessories primarily targeting consumers in cold climates seeking comfort and warmth. The website is built on the Mozello CMS platform and leverages modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics. Hosting and content delivery are managed via Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of advanced security headers and detailed security policies suggests room for improvement. The lack of WHOIS data due to query limits restricts full domain trust analysis, but the visible business information and contact details support legitimacy. Overall, the site presents a professional and trustworthy e-commerce platform with moderate risk and good compliance indicators.

R

ROWL darbnīca

rowldarbnica.lv

53

ROWL darbnīca is a small Latvian business specializing in wooden products, including laser cutting and engraving services. The company offers a variety of handcrafted wooden items such as gifts, decorations, and custom orders, targeting local consumers interested in artisan woodwork. The website is built on the Tilda CMS platform and integrates e-commerce features with Stripe payment processing. It demonstrates a moderate level of digital maturity with good design, mobile optimization, and basic SEO. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS data limits full trust verification, but the website content and social media presence support legitimacy. Overall, the site provides a professional and user-friendly experience suitable for its market niche.

A

AT.PIFE®

atpife.com

58

AT.PIFE® is a small Latvian-based business specializing in family-oriented hat designs and graphic design services, operating an e-commerce platform to retail their products. The company holds an EU registered trademark, indicating a formal business presence and brand protection. Their market position is niche, focusing on unique hat designs and related apparel, supported by a consistent branding strategy and active social media engagement. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries and Amazon Cloudfront CDN for hosting, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks important security headers and privacy compliance mechanisms such as cookie consent and privacy policy. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and trademark registration support the business's authenticity. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

N

NEON UNDERGROUND

underneon.eu

45

NEON UNDERGROUND is a specialized manufacturer and retailer of custom LED neon signs and wall art, positioning itself as the leading provider in the Baltic region. The company targets a diverse audience including businesses, home decorators, and event organizers, offering a combination of custom design tools and e-commerce sales. The website is built on a modern WordPress WooCommerce platform with Elementor, integrating popular tracking and marketing tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal privacy and cookie policies, which are critical for compliance and trust. No contact emails or phone numbers were explicitly found, which may impact user trust and support accessibility. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security best practices.

D

Domino’s Pizza

dominospizza.lv

58

Domino’s Pizza Latvia website provides an online platform for ordering pizza and related food items with delivery service focused on Riga. The site features a professional design, clear navigation, and detailed product listings including promotions and combos. The technical infrastructure leverages modern web technologies such as Google Maps API, reCAPTCHA v3, Google Tag Manager, and Facebook Pixel, indicating a mature digital presence. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and cookie policies are missing, which impacts compliance. The absence of WHOIS data limits domain legitimacy verification, but branding and content strongly suggest a legitimate franchise operation. Overall, the site is functional, secure, and user-friendly but would benefit from enhanced privacy compliance and incident response transparency.

R

RoyalSmoke.co.uk

royalsmoke.co.uk

48

RoyalSmoke.co.uk is a UK-based e-commerce retailer specializing in electronic cigarettes, e-liquids, and vaping accessories. Established around 2020, the company targets adult consumers interested in vaping products. The website is built on the PrestaShop platform and integrates common marketing and analytics tools such as Google Tag Manager and Facebook SDK. The site demonstrates good content quality, clear navigation, and consistent branding, positioning itself as a niche player in the vaping retail market. Technically, the site is moderately optimized with mobile responsiveness and standard e-commerce features, though some improvements in accessibility and SEO could be made. Security posture is adequate with HTTPS enforced and secure token usage, but lacks some security headers and cookie consent mechanisms, indicating room for compliance and security enhancements. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Albert Berner SIA operates the website shop.berner.eu/lv-lv/ as a professional e-commerce platform serving the Latvian market. The company offers a broad range of industrial and retail products including chemicals, fastening materials, electrical supplies, and work safety equipment. Founded in 1957, the company has an established presence and targets professional customers and businesses. The website supports multiple languages and provides user account management, product search, and ordering capabilities. Technically, the site uses modern web technologies including jQuery, Handlebars, and a consent management platform (Usercentrics), likely built on SAP Hybris CMS. Security posture is solid with HTTPS, secure forms, and cookie consent, though explicit security policies and incident response contacts are not found. WHOIS data is privacy protected, which is common and justified for commercial sites. Overall, the site is professional, trustworthy, and well-structured.