Medium-risk security reports

Riga Hen Weekend is a specialized event service provider focused on organizing hen and bachelorette parties in Riga, Latvia. The website offers a variety of day and night activities, packages, accommodation, and transfer services tailored for groups planning hen weekends. The business operates with a clear niche focus and provides secure online payment options, supported by a local office and 24-hour helpline, enhancing customer trust and service reliability. The domain is registered since 2018, aligning with the company's operational timeline. Technically, the website employs a modern yet stable technology stack including Bootstrap 3, jQuery, OwlCarousel2, and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Roistat. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, HTTPS is enforced, and the domain status is clientTransferProhibited, indicating protection against unauthorized transfers. However, DNSSEC is not enabled, and no explicit security headers are detected, which are areas for improvement. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. No incident response or security policy information is published, representing a gap in transparency. Overall, the website presents a professional and trustworthy front with good business credibility and moderate security posture. Strategic improvements in security headers, DNSSEC, and incident response disclosures would enhance the security maturity and compliance stance.

The website rigacruises.com currently serves as an under construction placeholder page with minimal content, indicating that the business or service is not yet operational or is undergoing redevelopment. The domain is registered since 2011 with a reputable registrar, suggesting a legitimate intent, but the lack of active content and contact information limits the ability to assess the business fully. The site appears to be related to maritime transportation or cruise services based on the domain name and visual elements. Technically, the site uses basic HTML and CSS with Cloudflare DNS but lacks advanced frameworks or CMS platforms. No analytics, advertising, or tracking technologies are present, reflecting a minimal digital footprint at this stage. Security posture is weak due to absence of HTTPS confirmation, security headers, and DNSSEC, which should be addressed before launch. Privacy and compliance policies are missing, which is a critical gap for future operations. Overall, the site is in an early phase with significant room for improvement in content, security, and compliance before it can be considered a mature business website.

Kurshi Hotel is a small hospitality business based in Jurmala, Latvia, offering 4-star design hotel accommodation, spa services, and event hosting. The website is professionally designed using WordPress and supports multiple languages, targeting tourists and visitors seeking quality lodging and wellness experiences. The business appears established since at least 2014 with a consistent brand presence and active social media channels. Technically, the site uses a modern tech stack with various plugins for UI enhancements and analytics tracking. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though it lacks some security headers and cookie consent mechanisms. Privacy compliance is partially addressed with a privacy policy page but no explicit cookie consent banner. Overall, the site is trustworthy and functional with room for security and compliance improvements.

Rasa SPA is a Latvian-based small hospitality business specializing in SPA and wellness services including massages, sauna rituals, and accommodation packages for couples, families, and friends. The website presents a professional and content-rich experience with clear contact information and multiple service offerings. Technically, the site is built on the Weebly platform, utilizing common analytics and marketing tools such as Google Analytics, Yandex Metrika, and Facebook Pixel. Privacy and cookie policies are implemented, indicating basic GDPR compliance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Overall, the site is trustworthy and well-suited for its local market niche.

Ambassade Riga is a small local beauty and skincare service provider based in Riga, Latvia. The company offers natural beauty treatments and features products from Biologique Recherche. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and UI libraries, providing a moderate performance and good mobile optimization. The site includes social media integration and basic marketing tracking via Facebook Pixel. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Security posture is generally good with HTTPS enforced and some security hardening scripts, but explicit security headers and incident response information are missing. Overall, the site is professional and trustworthy but could improve in privacy compliance and security transparency.

Kaļķu vārti is a restaurant located in the historic center of Riga, Latvia, offering a seasonal menu inspired by local produce. The website is built on WordPress with a modern tech stack including Oxygen Builder and jQuery, providing a reservation system with calendar availability. The site is secured with HTTPS and uses Google reCAPTCHA for form protection. However, it lacks visible privacy and cookie policies, and security headers are not implemented, which are areas for improvement. The WHOIS data could not be retrieved due to query limits, limiting full domain trust assessment. Overall, the site presents a professional and user-friendly experience suitable for its hospitality business.

Breezestudio.lv is a wellness and beauty service provider based in Riga, Latvia, specializing in treatments tailored for women such as aquabike, facial treatments, laser hair removal, and weight correction programs. The website presents a professional and consistent brand image targeting women seeking health and beauty services. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, integrating modern analytics and tracking tools like Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks security headers and formal privacy/cookie policies, indicating room for compliance improvement. WHOIS data was unavailable due to query limits, limiting domain trust verification. Overall, the site is functional and professional but should enhance privacy compliance and security best practices.

Amoralle is a niche e-commerce retailer specializing in sensual bodysuits, dresses, lingerie, and related apparel targeting adult women seeking elegant and multifunctional fashion pieces. The company operates on the Shopify platform, leveraging a modern tech stack with integrations for marketing, analytics, and customer reviews. The website is professionally designed with good navigation, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and domain ownership protections, though some security headers and DNSSEC could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms, but lacks explicit security policy and incident response details. Overall, the site presents a trustworthy and professional online presence with moderate user tracking and marketing tools in use.

Boardside.lv is a specialized Latvian retailer and service provider focused on watersports and board sports equipment, apparel, and training. Established in 2008 under Enter Dizains SIA, it offers a comprehensive product range including wetsuits, wakeboards, surfboards, skateboards, and related accessories. The company also provides rental services and organizes sports events and training, positioning itself as a key player in the local watersports community. The website is professionally designed with clear navigation and active social media engagement, supporting its market presence. Technically, the site uses modern frameworks like Vue.js and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF protections but lacks visible security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data was unavailable due to query limits, limiting domain trust verification. Overall, Boardside.lv presents as a credible and professional small business with room for improvement in security and privacy transparency.

The website hoodshop.eu is currently inaccessible beyond a Cloudflare security challenge page that verifies visitors are human before granting access. Due to this, no actual business content, contact information, or policies are available for analysis. The domain is registered through a reputable registrar, 101domain GRS Ltd., but no registrant details or business information are provided. The lack of accessible content prevents a full assessment of the company's market position, services, or compliance posture. Technically, the site uses Cloudflare's Turnstile captcha for bot mitigation, indicating some level of security infrastructure, but no further technical or security details are visible. Overall, the site cannot be evaluated for content quality, privacy compliance, or security posture beyond the presence of the WAF challenge.

RIMCIMCI.lv is a Latvian e-commerce retailer specializing in toys, tools, metal detectors, and various hobby and household equipment. The website targets consumers primarily in Latvia, offering a wide range of products with detailed pricing and availability information. The business has been operating since 2010, indicating a stable presence in the local market. The site includes contact details such as email, phone, and physical address, enhancing customer trust and accessibility. Technically, the website uses an older version of jQuery (1.7.2) alongside other JavaScript libraries like jQuery UI and Nivo Slider. Google Analytics and Google Tag Manager are implemented for user tracking and analytics. The CMS identified is Store 0.7 by sitelia.com, a niche e-commerce platform. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries, which may expose it to vulnerabilities. There is no cookie consent mechanism, indicating partial GDPR compliance. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the security posture is moderate but could be improved with updates and enhanced compliance. The website content is safe for general audiences, with no adult or NSFW material detected. Social media presence on Facebook and clear contact information support business credibility. Strategic improvements in security, privacy compliance, and technical modernization are recommended to strengthen trust and operational resilience.

Galleria Riga is a prominent retail and hospitality shopping center located in the city center of Riga, Latvia. The website presents a professional and well-structured digital presence, showcasing various retail categories, discounts, news, and contact information. The business is positioned as a large-scale shopping mall offering diverse services including fashion, beauty, sports, dining, and parking facilities. The parent company is East Capital Real Estate, indicating a solid corporate backing. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, including Yoast SEO and Google Analytics integration with privacy-conscious consent management. Security posture is good with HTTPS and reCAPTCHA implemented, though lacking some HTTP security headers. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the website content and contact details suggest a legitimate and trustworthy business. Overall, the site is user-friendly, mobile-optimized, and compliant with GDPR requirements.

Nordmed Tour is a specialized medical tourism facilitator based in Latvia, offering access to reputed doctors and clinics primarily in Latvia. The company focuses on providing personalized medical travel services including consultations, treatment planning, transfers, and aftercare. Their market position is strengthened by partnerships with leading hospitals and clinics, and a clear focus on affordable, high-quality healthcare services for international patients. Technically, the website is built on WordPress with a moderate tech stack including popular plugins and tracking tools. While the site is generally well-designed and user-friendly, it uses an outdated WordPress version and a nulled plugin, which pose security risks. The security posture is adequate with HTTPS and spam protection but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie consent mechanism and privacy policy present. Overall, the website is professional and trustworthy but would benefit from technical and security updates.

Rīgas Stradiņa universitātes stomatoloģijas institūts is a leading dental healthcare and academic institution in Latvia and the Baltic region. The website presents a comprehensive overview of their multidisciplinary dental services, including clinics for orthodontics, implantology, oral surgery, and diagnostic radiology. The institute is affiliated with Rīgas Stradiņa universitāte, enhancing its credibility and academic standing. The site targets patients seeking advanced dental care and professionals interested in research and education in stomatology. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Security posture is moderate with HTTPS enforced but lacks visible security headers and explicit security policies. Privacy compliance is partial, with cookie consent implemented but no clear privacy policy page found. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is professional and trustworthy but could improve transparency and security practices.

Krokus.lv is a well-established online florist and flower delivery service operating primarily in Riga and across Latvia. The company offers a wide range of fresh flower bouquets, arrangements, and related gifts, emphasizing professional floristry and timely delivery, including same-day service. Their platform supports multiple languages and provides a user-friendly e-commerce experience. Technically, the website employs modern JavaScript libraries and integrates with major analytics and advertising platforms such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification, but the business information and contact details are transparent and professional. Overall, Krokus.lv presents a credible and trustworthy online retail presence in the floral industry.

Violet.lv is a Latvian-based e-commerce platform specializing in flower and gift delivery services across Riga and Latvia. The website offers a variety of products including flower bouquets, flower boxes, gift boxes, and greeting cards, with a promise of fast courier delivery starting from 2 hours. The business targets general consumers looking for quality floral gifts and related products. The site is localized primarily in Latvian with options for English and Russian, indicating a regional focus with some international accessibility. Technically, the website is built on WordPress with WooCommerce, leveraging common web technologies such as jQuery and Bootstrap icons. It integrates Google Tag Manager for analytics and TalkMe for online chat support, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible advanced security policies or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which is a gap given GDPR applicability. Overall, the site presents as a legitimate small retail business with good content quality and user experience but could improve in privacy and security transparency.

Veloprofs.lv is a professional Latvian e-commerce retailer specializing in bicycles, including road, mountain (MTB), city, fitness, and children's bikes, as well as electric bicycles from brands like Bosch and Shimano. The company also offers a wide range of accessories, helmets, glasses, shoes, clothing, and bicycle repair and servicing. The website is well-structured, multilingual, and uses PrestaShop CMS with modern marketing and tracking technologies such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS and security headers implemented, though explicit privacy and terms of service policies are missing. WHOIS data is unavailable due to query limits, but the website's professional presentation and social media presence support its legitimacy. Overall, the site serves a general audience interested in cycling products and services in Latvia.

Latvia Sotheby's International Realty is a premium real estate brokerage firm operating in Latvia, affiliated with the globally recognized Sotheby’s International Realty brand. The company specializes in luxury residential properties, investment real estate, and offers comprehensive services for buying, selling, and renting properties. Their market position is strong within the premium segment, supported by a professional multilingual website and active social media presence. Technically, the website is built on WordPress with modern optimization and compliance tools, including GDPR cookie consent and multilingual support. Security posture is good with HTTPS enforced and some security headers present, though improvements like DNSSEC and security.txt publication are recommended. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

OLD TOWN ESTATE is a small Latvian real estate agency specializing in sales and rentals of residential and commercial properties, including assistance with residence permits in Latvia. The website is professionally designed with good content quality and clear navigation, targeting Russian-speaking clients interested in Latvian real estate. The technical infrastructure uses common web technologies such as jQuery, Google Analytics, Yandex.Metrika, and live chat services, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site is functional and trustworthy but could improve compliance and security transparency.

Innorental is a small, professional property management company based in Riga, Latvia, specializing in short-term and long-term rental property management. The company leverages modern tools such as dynamic pricing and owner portals to maximize rental income and provide excellent guest experiences. The website is built on Squarespace and integrates common marketing and analytics tools like Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is good with HTTPS and HSTS enabled, though additional security headers and policies could improve it. Privacy compliance is basic, with a cookie banner present but no privacy or terms of service pages found. WHOIS data is missing, which reduces trustworthiness but the professional site content supports legitimacy. Overall, the website presents a credible business with room for improvement in security and compliance documentation.

POLICY is a specialized audiovisual storytelling and video production company with a decade of experience primarily serving commercial, film, and online content clients. Based in Riga, Latvia, they have established a strong market presence working with major agencies locally and internationally. Their portfolio is showcased extensively through embedded Vimeo videos, reflecting a professional and creative production house. Technically, the website is built on Webflow with modern web standards, fast performance, and mobile optimization, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit incident response contacts or security.txt disclosures. Privacy compliance is mostly addressed with a comprehensive privacy policy and terms of service, though cookie consent mechanisms are missing, representing a compliance gap. Overall, POLICY demonstrates a high level of professionalism and trustworthiness, though WHOIS privacy limits domain transparency.

Vilki Books is a specialized e-commerce retailer focusing on Russian language children's books and related products, serving customers primarily in Latvia and Europe. The website is professionally designed using WordPress and WooCommerce, offering a broad catalog with clear navigation and multilingual support. The business appears to be small-sized, founded in 2017, and maintains a consistent brand presence with active social media channels. Technically, the site uses modern web technologies and integrates Google Tag Manager and various WooCommerce plugins to enhance user experience and marketing capabilities. Security posture is good with HTTPS enforced and Cloudflare DNS, though improvements such as enabling DNSSEC and adding explicit security headers are recommended. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages, though a cookie consent mechanism is implemented. Overall, the website is safe, family-friendly, and trustworthy, with room for compliance and security enhancements.

Grāmatu nams “Valters un Rapa” operates a well-structured Latvian e-commerce website specializing in books, stationery, games, and creative supplies. The site targets Latvian-speaking consumers seeking a broad selection of literary and office products. The business model focuses on retail sales through an online platform, positioning itself as a reputable and established player in the Latvian market. The website features comprehensive product categorization and user-friendly navigation, supporting a positive user experience. Technically, the website employs common web technologies such as jQuery, Google Fonts, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes standard SEO meta tags. However, there is no evidence of advanced frameworks or CMS platforms, and hosting details remain unknown. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and includes CSRF tokens and consent management for cookies and analytics, indicating a baseline security posture. However, the absence of HTTP security headers and incident response contact information suggests opportunities to enhance security maturity. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a professional and trustworthy front for its business, with good privacy compliance and clear contact information. The lack of WHOIS data due to query limits limits full domain legitimacy verification, but the site content and structure support a positive trust assessment. Strategic improvements in security headers, incident response policies, and technical modernization would further strengthen the platform.

Bauer Media Outdoor is a professional advertising company specializing in Digital Out of Home (DOOH) and outdoor advertising services, targeting businesses and advertisers in Latvia and surrounding regions. The website presents a market-leading position with a focus on effective outdoor advertising and public infrastructure. Technically, the site is built on Webflow with modern JavaScript libraries such as GSAP and SwiperJS, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and vulnerability disclosure policies suggests room for improvement. The missing WHOIS data is a concern but the professional branding and social media presence mitigate some trust issues. Overall, the site is well-designed, GDPR compliant, and serves its business purpose effectively.

Riga Stag Weekend is a specialized hospitality business offering tailored stag party packages and activities in Riga, Latvia. Established since 2012, it provides a comprehensive one-stop solution including day and night activities, accommodation, transfers, and online payment options. The website is professionally designed with consistent branding and targets men planning stag parties, positioning itself as a leading local provider with 24/7 support. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, though it lacks a CMS indication and some advanced accessibility features. Security posture is moderate with HTTPS enabled and secure payment processing via PayPal, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with privacy and cookie policies present and GDPR considerations implied. Overall, the domain registration is consistent and trustworthy with no blocking or WAF detected. The content is mature-themed but safe, focusing on nightlife and entertainment without explicit adult content.

Keystone Collection is a newly launched (2023) hotel chain based in Riga, Latvia, offering upscale hospitality services with a focus on authentic and elegant stays in the historic Old Town. The company operates properties such as Konventa Sēta Hotel and Carillon Aparthotel, targeting business and family travelers seeking comfort and cultural experience. The website is built on WordPress with modern plugins and technologies, hosted on Azure DNS infrastructure. It features good design quality, mobile optimization, and integrated social media feeds. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website and business present a trustworthy and professional image with room for improvement in security and compliance documentation.

Listt Events is a Latvian-based professional event management and brand engagement agency specializing in a wide range of services including brand engagement, business development, creative concept development, innovative production, and both corporate and private events. The company demonstrates a strong market position with a portfolio of notable clients and repeat business, supported by detailed client testimonials and a comprehensive service offering. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Analytics, and Microsoft Clarity, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and reCAPTCHA implemented, though security headers are missing and could be improved. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though cookie consent mechanisms are not explicitly implemented. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for technical and security enhancement.

ESN Latvia is a non-profit student organization dedicated to supporting international students and promoting cultural exchange under the Erasmus Student Network umbrella. The website serves as an information hub for projects, news, events, and contact details, targeting Erasmus participants and student volunteers in Latvia. The organization maintains a consistent brand presence and active social media engagement, reinforcing its position as a key player in the student mobility sector. Technically, the website is built on Drupal CMS with a modern JavaScript stack including jQuery and various UI libraries. It integrates Google Analytics with IP anonymization and Facebook SDK for social media features. The site is mobile-optimized and structured for good SEO, though accessibility features are basic. Performance is moderate, with room for optimization. Security posture is adequate with HTTPS enforced and some privacy-conscious analytics settings. However, the absence of security headers and cookie consent mechanisms indicates areas for improvement. The lack of WHOIS data limits full domain legitimacy verification, but the website content and domain alignment suggest a trustworthy entity. Overall, ESN Latvia's digital presence is professional and functional, supporting its mission effectively. Strategic enhancements in security policies, privacy compliance, and domain transparency would further strengthen trust and resilience.

Carlson Design Home is a small interior design firm based in Riga, Latvia, specializing in sustainable interior design projects that balance functionality, comfort, and aesthetics. Their services focus on effective design and development with transparent stakeholder coordination. The website is professionally designed using Webflow CMS and modern frontend libraries, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with cookie consent implemented but lacks advanced security headers and explicit security policies. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the website presents a trustworthy and professional business presence with room for security and compliance enhancements.

The website ww38.tea-shop.lv is a parked domain landing page primarily serving as a placeholder with advertising and affiliate links. It does not represent an active business or e-commerce platform. The content is minimal, mostly in Finnish, and indicates the domain may be for sale. The technical infrastructure relies on basic HTML and JavaScript with advertising scripts from Google Adsense Domains CAF and AdsDeli, hosted on Amazon Cloudfront CDN. There is no evidence of a CMS or modern web frameworks. Security posture is weak with no HTTPS detected and no security headers present. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism. No contact or business information is provided, reducing business credibility and trustworthiness. Overall, the site poses low risk but also offers limited value or legitimacy as a business website.

Kafijas Namiņš is a small coffee retail business based in Riga, Latvia, specializing in freshly roasted coffee products. The website is built on the Squarespace platform, featuring a clean and professional design with good mobile optimization and clear navigation. The business targets local coffee consumers and offers an e-commerce shopping experience. Social media presence on Instagram and Facebook supports customer engagement. Technically, the site uses modern web technologies including HTTPS with HSTS, Google Fonts, and Weglot for translation, but lacks advanced security headers and privacy policies. The absence of WHOIS data raises concerns about domain registration transparency, though the active website and contact information lend credibility. Overall, the site is functional and trustworthy for its business scope but would benefit from enhanced privacy compliance and security practices.

Kalve Coffee Roasters is a specialty coffee roasting company established in 2016, serving both B2C and B2B markets with a focus on high-quality coffee products and efficient coffee solutions. The company operates an e-commerce platform built on Shopify, offering a range of coffee blends, equipment, and services such as coffee machine rental and office coffee solutions. Their market position is that of a niche specialty roaster with a growing presence in the Baltic region. Technically, the website leverages modern e-commerce technologies including Shopify's Alchemy theme, integrates multiple analytics and marketing tools, and maintains good performance and mobile optimization. Security-wise, the site enforces HTTPS, uses domain status locks, and implements cookie consent mechanisms, though it lacks DNSSEC and some advanced security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, but could enhance its security posture with additional policies and technical controls.

Mārupe.lv is the official website for the Mārupes novads municipality in Latvia, serving as a trusted source for local news, events, education, culture, sports, tourism, and business information. The site targets residents and visitors of the Mārupes region, providing comprehensive municipal services and community updates. The website is built on Drupal 9 CMS and integrates modern web technologies including Google Analytics for visitor tracking. It demonstrates good mobile optimization and accessibility features, with clear navigation and consistent branding. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, though explicit security headers and privacy policies are not clearly published. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site is professional, trustworthy, and serves its public service role effectively.

Vianova is a small road construction company based in Riga, Latvia, positioning itself as a quality-focused service provider rather than the largest player in the market. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript libraries. The technical infrastructure is modern and benefits from Wix's hosting and content delivery network, providing moderate performance and good mobile optimization. Security measures include HTTPS and some script-based hardening, but lack of visible security headers and privacy policies indicates room for improvement. The absence of contact information and privacy compliance documentation reduces the overall trustworthiness and business credibility. No WHOIS data was available due to query limits, limiting domain legitimacy assessment. Overall, the website presents a professional image but would benefit from enhanced transparency and compliance features.

SIA PRO DEV is a Latvian construction company with over 10 years of experience and more than 500 completed projects nationwide. The company specializes in construction management and direct execution of construction works, with a strong focus on home insulation and renovation. It is part of a group including UNITEMP and SIA PRO GROUP, indicating a broader business ecosystem. The website is professionally designed, multilingual, and provides clear contact information and social media presence. Technically, the site is built on WordPress with modern plugins and integrates security features such as HTTPS, Google reCAPTCHA, and cookie consent mechanisms. However, WHOIS data is unavailable due to query limits, limiting domain registration verification. Overall, the site demonstrates a solid business presence with good security posture and user experience.

Motosports.lv is an established Latvian e-commerce retailer specializing in motorcycles, motorcycle parts, and outdoor sports equipment including apparel and accessories. The company has been operating since 2003 and targets motorcycle enthusiasts and outdoor sports consumers. The website is built on the OpenCart platform with a modern design and good mobile optimization. It integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and live chat via Tawk.to. Security posture is reasonable with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy, terms of service, and security incident contact information. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site presents a professional and trustworthy front for a small retail business in the transportation and retail sectors.

Strada coffee bar is a specialty coffee and tea business located in Riga, Latvia, offering a curated selection of rare and specialty coffees and teas alongside confectionery and bar services. The business positions itself as a cultural and artistic space with a boutique shop and regular events, targeting coffee and tea connoisseurs, creatives, and travelers. The website is built on the Tilda CMS platform and demonstrates a good level of design quality and user experience, with clear navigation and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and no WHOIS data was available due to query limits, limiting domain trust verification. Security posture is moderate with HTTPS usage but lacks visible security headers and formal incident response information. Overall, the website is safe, professional, and credible for a small hospitality business but would benefit from enhanced privacy compliance and security practices.

Pure Chocolate is a Latvian-based premium chocolate company specializing in handcrafted chocolate truffles made from high-quality ingredients. With over 18 years of experience, the company offers a wide variety of truffles and personalized chocolate gifts, targeting consumers who appreciate gourmet confectionery. The website also promotes a chocolate museum and related experiential services, enhancing brand engagement. Technically, the website is built on WordPress with modern plugins and provides a multilingual experience in Latvian and English. The site is well-optimized for SEO, mobile-friendly, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification, but the overall digital presence and business information suggest a legitimate and professional operation.

Retro Auto Muzejs is a small museum based in Riga, Latvia, specializing in retro automobiles, motorcycles, and bicycles. The website provides information about exhibitions, virtual tours, ticketing, and facility rentals, targeting general visitors and vintage vehicle enthusiasts. The museum operates with a clear business model focused on cultural preservation and visitor engagement. Technically, the website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks some security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. The absence of WHOIS data limits full trust verification, but the visible contact information and social media presence support legitimacy. Overall, the website is professional, secure enough for its purpose, and compliant with basic privacy regulations.

No73 is a hospitality business operating as a restaurant located in Riga, Latvia. The company offers dining services with an emphasis on celebrating all occasions, operating 24/7 without changes. Their digital presence includes an interactive online menu, table ordering capabilities, and customer feedback collection, positioning them as a modern local restaurant with a focus on customer experience. The website is built using modern web technologies such as React and Next.js, hosted likely behind Cloudflare, and optimized for performance and mobile use. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing trust and compliance. Overall, the business demonstrates a good level of digital maturity and professionalism, with clear contact information and social media presence supporting customer engagement.

SIA “BALTIC IBC PRINT” operates the website iepakojums.lv, providing manufacturing and retail services for paper bags, packaging, and promotional materials primarily targeting B2B customers in Latvia. The company emphasizes quality, custom design, and long-term client relationships, supported by testimonials and a physical showroom in Riga. The website is built on OpenCart CMS with a modern but moderate technical stack including jQuery, Bootstrap, and various sliders/carousels. It supports multiple languages and e-commerce functionalities. Security posture is adequate with HTTPS and CAPTCHA on forms but lacks advanced security headers and explicit privacy/cookie policies. WHOIS data is unavailable due to query limits, but the site shows consistent business information and trust signals. Overall, the site is professional, functional, and trustworthy with room for improvement in privacy compliance and security best practices.

The website limo-booking.com appears to be associated with a transportation-related business, likely offering limousine booking services. However, the actual website content is completely minimal, consisting of an empty HTML body, which suggests that the site is either under construction or access is blocked by a Web Application Firewall (WAF), specifically Cloudflare. The domain is registered since 2016 with a reputable registrar, indicating an established presence, but no visible business or contact information is available on the site itself. From a technical perspective, the site uses Cloudflare DNS servers but lacks DNSSEC and no metadata or scripts are present in the HTML content. This minimal content and lack of technical indicators prevent a thorough assessment of the technology stack, performance, or SEO optimization. The absence of security headers and no visible SSL/TLS configuration details raise concerns about the security posture, although the use of Cloudflare suggests some level of protection. Security-wise, the lack of published privacy, cookie, or security policies, combined with no contact or incident response information, indicates poor compliance with privacy regulations such as GDPR. The site’s security score is low due to inaccessible content and missing best practices. No vulnerabilities or certifications are visible due to the lack of content. Overall, the website presents a high risk from a security and compliance perspective due to inaccessible content and missing critical information. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, adding contact and incident response details, and improving website content and technical SEO to enhance trust and compliance.

Himalaya is a small family restaurant based in Riga, Latvia, operating since 2012. The website presents the business as an authentic dining experience provider with a focus on high-quality food and a fun ambiance. The site is built on the Wix platform, leveraging standard Wix technologies and scripts, indicating a moderate level of digital maturity suitable for small hospitality businesses. Security posture is basic with HTTPS enabled but lacking advanced security headers and privacy compliance mechanisms. No contact or privacy policies are present, which could impact user trust and regulatory compliance. Overall, the website is functional and professional but would benefit from enhanced security and privacy features.

Ungurmuiža is a cultural heritage site in Latvia featuring a unique 18th-century wooden architectural ensemble. The website presents the venue as a destination for concerts, exhibitions, guided tours, weddings, accommodation, and dining, targeting tourists and cultural enthusiasts. The business operates in the hospitality and cultural sectors with a niche market position supported by partnerships with regional and national cultural organizations. Technically, the website is built on a modern Next.js framework, providing good mobile optimization and user experience, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled but lacks some security headers and privacy policies, indicating room for compliance improvements. The absence of WHOIS data limits domain legitimacy verification, but the website content and partner affiliations suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

Cinevilla Studios is a specialized film production company and studio backlot located in Latvia, serving as the only such facility in the Baltics. The company offers a range of services including film production support, tourism experiences such as guided tours and augmented reality games, and event hosting for corporate and thematic gatherings. Their market position is strong within the regional media and tourism sectors, targeting international filmmakers, tourists, and event organizers. The website reflects a professional digital presence built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. SEO and content quality are good, supporting effective audience engagement. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in DNS security and HTTP headers. Overall, the website and domain registration data align well, supporting business legitimacy and trustworthiness.

Rīgas Reinholda Šmēlinga vidusskola is a Latvian secondary educational institution providing local educational services. The website is built on WordPress using the Divi theme and includes plugins such as Robo Gallery. The technical infrastructure is moderate with standard analytics tools like Google Analytics and Tag Manager implemented. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is weak due to missing security best practices and absence of incident response information. Overall, the website is accessible and safe for general audiences but requires improvements in privacy compliance and security to enhance trustworthiness and regulatory adherence.

Rīgas 22. vidusskola is a municipal secondary school located in Riga, Latvia, operating under the local government's Education, Culture and Sports Department. The school offers a range of educational programs, emphasizing creativity, leadership, and cooperation. The website serves students, parents, and the local community with information about admissions, programs, events, and contact details. The institution positions itself as a traditional yet modern and competitive educational establishment. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. It provides a functional but basic user experience with moderate performance and limited mobile optimization. SEO and accessibility features are present but minimal. The site links to official social media channels and uses Google search integration. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating partial compliance with GDPR and security best practices. No vulnerabilities or exposed sensitive data were detected. WHOIS data could not be retrieved, limiting domain legitimacy verification, but the presence of official contact information and municipal affiliation supports trustworthiness. Overall, the website is a credible and safe educational resource with room for improvement in privacy compliance, security hardening, and technical modernization.

Rīgas Franču Licejs is an educational institution based in Latvia, providing secondary education services. The website serves as an informational portal for students, parents, and educators, showcasing school events and general information. The site is built on WordPress using the Elementor page builder, indicating a modern and maintainable technical infrastructure. The presence of cookie consent mechanisms demonstrates awareness of GDPR compliance requirements. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Overall, the website is professional, safe, and trustworthy, though improvements in contact information visibility and security best practices are recommended.

Ziedu un puķu veikals Elīna is a small local flower shop based in Cēsis, Latvia, specializing in fresh flower bouquets, flower boxes, and delivery services. The website offers an e-commerce platform for customers to order flowers online with a focus on heartfelt gifting occasions such as birthdays, name days, and weddings. The business emphasizes personalized service and has over 20 years of experience in the floral retail sector. The site is well-branded, consistent, and targets a general audience interested in flower gifts. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries such as jQuery and Fancybox, and uses Amazon CloudFront as a CDN for hosting static assets. It includes accessibility features and is mobile optimized. SEO practices are good with proper meta tags and structured data in JSON-LD format describing the store and its contact details. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, and there is no published security.txt or vulnerability disclosure page. Forms are present with password fields but lack visible anti-CSRF tokens. Overall, the security posture is moderate with room for improvement. The risk assessment indicates a legitimate and trustworthy small business website with no signs of malicious activity or adult content. The absence of WHOIS data limits domain registration trust verification, but the website content and business information appear consistent and professional. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and implementing anti-CSRF protections to strengthen security and trust.

Rigatransfer.com is a well-established taxi and transfer service provider based in Riga, Latvia, operating since 2011. The company offers a range of transportation services including private, business, economy, premium, intercity, and international taxi transfers. Their target audience includes travelers, tourists, and business clients seeking reliable and comfortable transportation within Latvia and to neighboring countries. The website is professionally designed with multilingual support and integrates customer reviews and trust signals such as Tripadvisor ratings. Technically, the site uses a custom-built platform with modern JavaScript libraries and analytics tools, providing a good user experience and mobile optimization. However, there are gaps in privacy compliance and security best practices, notably the absence of privacy and cookie policies and missing security headers. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.