Security Directory

G

Graw Furniture

grawfurniture.com

57

Graw Furniture is a small retail business specializing in high-quality, handcrafted design furniture and interior items. The company emphasizes artisanal craftsmanship using wood combined with glass and metal elements, targeting consumers seeking unique and soulful furniture pieces. Their business model includes e-commerce sales and custom-made furniture services, positioning them as a niche player in the artisan furniture market primarily serving customers in Latvia and potentially broader markets via their website. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries such as jQuery and Fancybox for UI enhancements. Hosting is supported by Amazon CloudFront CDN, ensuring moderate performance and good mobile optimization. The site includes standard SEO and accessibility features, though accessibility is basic. Analytics and marketing tools include Google Analytics, Facebook Pixel, and Engaga, indicating moderate user tracking and marketing sophistication. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, the absence of security headers and a published security or incident response policy indicates room for improvement. No vulnerabilities or exposed sensitive data were detected, and login forms appear secured. The missing WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trustworthiness. Overall, Graw Furniture presents a professional and trustworthy online presence with solid content and technical implementation. The primary risk lies in the lack of domain registration transparency and limited security policy disclosures. Strategic improvements in security headers, incident response visibility, and WHOIS data transparency would enhance trust and compliance.

Q

Quincy Latvia

quincy.lv

52

Quincy Latvia is a small family-owned business specializing in organic sea buckthorn products cultivated in the Smiltene region of Latvia. Their website promotes natural, preservative-free health products and offers corporate gift options. The business targets health-conscious consumers interested in organic and natural food products. The site is built on the Mozello CMS platform, leveraging Cloudfront CDN and common JavaScript libraries such as jQuery and Fancybox. Google Analytics and Google Tag Manager are used for visitor tracking. The website is mobile responsive and provides a good user experience with clear navigation and relevant content. However, it lacks formal privacy, cookie, and terms of service policies, which impacts compliance and trust.

G

GRANDEG

grandeg.lv

56

GRANDEG is a Latvian company specializing in the manufacture and sale of high-quality pellet heating boilers for residential, commercial, and industrial customers. The website presents a professional and consistent brand image with clear product categorization and contact information. The company targets a diverse audience including homeowners, businesses, and industrial facilities, positioning itself as a domestic manufacturer with specialized offerings. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries such as jQuery and Fancybox, and is hosted via Amazon Cloudfront CDN. It employs HTTPS with a valid SSL certificate and integrates Google Analytics and Facebook Pixel for user tracking. Security posture is moderate with room for improvement, notably the absence of security headers and a formal privacy policy page. The site includes a cookie consent banner indicating some level of privacy compliance, but lacks detailed GDPR disclosures or incident response contacts. WHOIS data could not be retrieved due to query limits, limiting domain registration trust verification. Overall, the site is safe, business-focused, and suitable for general audiences.

T

Tauriņkrasti – restorāns, SPA un naktsmājas pie dabas.

taurinkrasti.lv

55

Tauriņkrasti is a Latvian health and wellness center offering a combination of spa services, health treatments, accommodation, and recreational activities near the sea. The website presents a professional and consistent brand image focused on nature, relaxation, and health. The business targets health-conscious individuals and tourists seeking wellness and active leisure. Technically, the website uses a Moze CMS platform with common JavaScript libraries and is hosted on Amazon Cloudfront CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. WHOIS data could not be retrieved, limiting domain trust verification. Overall, the site is functional, safe, and moderately trustworthy but would benefit from enhanced privacy and security disclosures.

S

STRAUSS UN KAZA

straussunkaza.lv

51

Strauss un Kaza is a small Latvian family-operated business combining a farm, restaurant, and e-commerce store. The website presents a local hospitality and retail business offering farm visits, dining experiences, and online sales of farm products such as ostrich eggs and meat. The site is built on the Moze CMS platform and uses Amazon CloudFront CDN for content delivery. The technical infrastructure includes common JavaScript libraries like jQuery and Fancybox, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking visible security headers and privacy policies. The login form exists but lacks advanced security features. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

S

Silvana - Skaistumkopšanas salons

silvana.lv

54

Silvana is a small beauty salon based in Riga, Latvia, specializing in hair extensions using an ultrasound method, along with other beauty services such as cosmetology, manicure, pedicure, and massage. The salon also acts as the official distributor of Slavic Hair extensions in Latvia, positioning itself as a trusted local provider with a focus on quality and customer care. The website is professionally designed with clear navigation and good content relevance, targeting a general audience seeking beauty services. Technically, the site is built on the Mozello CMS platform, leveraging Amazon CloudFront CDN and includes modern JavaScript libraries like jQuery and Fancybox. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data limits full trust verification, but contact details and social media presence support legitimacy. Overall, the site is functional and credible for its business domain.

S

SIA “Bea”

bea.lv

54

SIA “Bea” is a small retail business specializing in curtains and home textile products located in Riga, Latvia. The company offers a variety of products including curtains, stage curtains, blinds, fabrics, cushions, tablecloths, bed covers, and accessories. They also provide services such as design consultations, sewing, installation, and ecological fabric washing. The website targets local consumers and wholesale customers, presenting a professional and consistent brand image with clear contact information and social media presence. Technically, the website is built on the Mozello CMS platform, leveraging Amazon Cloudfront CDN for content delivery. It uses common web technologies such as jQuery and Fancybox, and integrates Google Analytics and Google Tag Manager for user tracking and analytics. The site is mobile optimized with a moderate performance profile. However, it lacks some advanced SEO and accessibility features and does not explicitly provide privacy or terms of service pages. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating some level of privacy compliance. However, no security headers were detected, and no explicit security or incident response policies are published. The absence of WHOIS data due to query limits limits the ability to fully verify domain registration legitimacy, but the website content and business information appear consistent and trustworthy for a small local business. Overall, the website is functional, professional, and safe for general audiences, but improvements in security headers, privacy documentation, and WHOIS transparency would enhance trust and compliance.

B

Baleta nodarbības - Par mums

baletanodarbibas.lv

49

The website www.baletanodarbibas.lv represents a small Latvian ballet school offering ballet classes for children and adults. The business focuses on dance education, emphasizing physical development, coordination, and artistic expression. The site showcases experienced instructors and provides detailed descriptions of their backgrounds and offerings. The market position is local with a niche focus on ballet and dance training. Technically, the website uses standard web technologies including jQuery and Fancybox, hosted via Cloudfront CDN, with moderate performance and good mobile optimization. However, there is a lack of advanced security headers and no visible privacy or cookie policies, indicating compliance gaps. No WHOIS data was available due to query limits, but the domain appears legitimate based on content and social media presence. Overall, the site is functional and informative but could improve in security and privacy compliance.

H

Bauņu Bullītis - Sākums

hailanderi.lv

54

The website hailanderi.lv represents a Latvian small business specializing in the retail and processing of local, ecologically clean beef, game, and lamb meat products. The business operates an online meat shop, offers meat processing and slaughterhouse services, and provides delivery options. The site targets Latvian consumers seeking quality local meat products and includes a blog with recipes and advice to engage its audience. The market position is niche, focusing on ecological and local origin meat products. Technically, the website is built on the Mozello CMS platform, leveraging common JavaScript libraries such as jQuery and Fancybox, and is hosted via Amazon Cloudfront CDN. The site is mobile optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. No WHOIS data was retrievable due to query limits, limiting domain trust verification. Overall, the website is functional, professional, and safe for general audiences, but could improve privacy compliance and security transparency.

S

Studija FA

studijafa.lv

53

Studija FA is a Latvian small business specializing in audio production services including event sound engineering, sound recording studio access, phonogram creation, and design studio offerings focused on design and interior items. The website presents a professional and consistent brand image targeting musicians, event organizers, and design clients. Technically, the site uses a Moze (Mozello) CMS platform with modern JavaScript libraries and is hosted on Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. No WHOIS data was available due to query limits, but no suspicious indicators were found on the site. Overall, the site is safe, professional, and functional but could improve in privacy and security transparency.

S

SIA Krogzeme

krogzeme.lv

55

SIA Krogzeme is a Latvian agricultural company specializing in commercial blackcurrant cultivation, seedling production, orchard establishment, and related agricultural machinery dealership. The company also offers frozen berry storage and processing services. Their market position is that of a local leader in the Baltic region for blackcurrant commercial cultivation and agricultural equipment sales. The website is built on the Mozello CMS platform, leveraging modern technologies such as jQuery, Google Analytics, and Amazon CloudFront CDN, indicating moderate digital maturity. The site is mobile-optimized and provides clear navigation and relevant content for its target audience of commercial growers and agricultural businesses. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and privacy compliance elements. WHOIS data could not be retrieved, limiting domain trust verification. Overall, the website is professional and trustworthy with room for improvement in privacy and security transparency.

R

Paklāji, gumijas paklaji, ieejas paklāji, pret noguruma paklāji, paklāju veikals

redcarpet.lv

52

Redcarpet.lv is a Latvian retail business specializing in the sale of various types of mats and carpets for offices, production facilities, retail locations, and homes. The company emphasizes quality European-made products and offers innovative solutions such as AR technology for customers to visualize entrance mats in their homes. The website is professionally designed, mobile-optimized, and provides a clear product catalog and informational content in Latvian. Technical infrastructure includes common JavaScript libraries and Amazon CloudFront CDN, with Google Analytics integrated for user tracking. Security posture is adequate with HTTPS enforced and secure login forms, though some security headers are missing. Privacy and cookie policies are present, indicating GDPR compliance. However, no direct contact emails or phone numbers are found on the main pages, which may affect user trust. WHOIS data is unavailable due to query limits, but the website appears legitimate and consistent with a small retail business profile.

S

Slimnīca Ģintermuiža

gintermuiza.lv

56

Slimnīca Ģintermuiža is a Latvian healthcare institution specializing in mental health and addiction treatment services. The website presents a comprehensive overview of their mission, key services including inpatient and outpatient psychiatric care, rehabilitation, and medical commissions. The institution targets residents in need of psychiatric and narcological assistance, positioning itself as a regional healthcare provider with a public service model. The website content is well-structured, professionally designed, and consistent with the organization's healthcare focus. Technically, the website uses a Mozello CMS platform with Amazon Cloudfront CDN for content delivery. It employs common JavaScript libraries such as jQuery and Fancybox for UI enhancements. The site is mobile optimized and includes a cookie consent mechanism, indicating awareness of privacy compliance. However, some security headers are not evident, and no advanced analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and provides cookie consent, but lacks visible security headers and explicit incident response contact information. The WHOIS data could not be retrieved due to query limits, but the domain appears legitimate based on content and social media presence. Privacy protection on WHOIS is justified given the healthcare context. Overall, the site demonstrates a moderate to good security posture with room for improvement in headers and incident response readiness. The overall risk assessment is low, with recommendations to enhance security headers, improve accessibility, and add explicit incident response contacts to strengthen trust and compliance.

B

Biedrība "Integrācija sabiedrībai"

srcratnieki.lv

51

SRC Ratnieki is a Latvian non-profit social rehabilitation center focused on providing comprehensive psychological, mental, and social rehabilitation services for men. The organization aims to support individuals facing difficulties by facilitating their successful reintegration into society. The website is built on the Mozello CMS platform and uses Amazon Cloudfront CDN for content delivery. It employs common JavaScript libraries such as jQuery and Fancybox for UI enhancements. The site is accessible, mobile-optimized, and presents clear navigation and relevant content in Latvian. However, it lacks critical privacy and cookie policies, which are essential for GDPR compliance given its European location. Security headers are not detected, and no vulnerability disclosure or incident response information is provided, indicating room for improvement in security posture. Contact information is limited to a phone number, with no email or physical address visible. Social media presence includes Facebook and Draugiem profiles. Overall, the site is functional and professional but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

S

SIA "LEDset"

leduzstadisana.lv

51

LEDuzstadisana.lv is a Latvian small business specializing in modern lighting installation, design, and rental services. The company, legally named SIA "LEDset", presents a professional website targeting businesses and individuals seeking lighting solutions. Their market position is that of a niche local specialist with a clear focus on energy-efficient LED lighting and related design services. The website includes a gallery showcasing projects, a contact form for consultations, and links to social media platforms, indicating active customer engagement. Technically, the website is built on the Mozello CMS platform, utilizing common JavaScript libraries such as jQuery and Fancybox, and is hosted via a CDN (Cloudfront). It employs HTTPS with Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were found. From a security perspective, the site enforces HTTPS and uses client-side form validation. However, it lacks HTTP security headers like Content-Security-Policy and HSTS, and the login form exposes error messages that could aid attackers. No WHOIS data was available due to query limits, limiting domain trust analysis. The business information on the site appears legitimate, but the absence of privacy and security policies and some technical weaknesses suggest room for improvement. Overall, the website is functional and professional but would benefit from enhanced security controls, published privacy and security policies, and improved form input validation to strengthen trust and compliance.

M

Foto studija druka un apdruka, laba kvalitāte par labām cenām

meistardarbnica.lv

52

The website www.meistardarbnica.lv is a Latvian-based small retail business specializing in photo printing, document photography, and custom printing services on various items such as mugs, plates, and magnets. The site operates an e-commerce platform offering a wide range of products and services targeted at general consumers and local customers. The business appears to be positioned as a local photo studio and printing service provider with a focus on quality and affordability. Technically, the website is built on the Mozello CMS platform, leveraging Amazon Cloudfront CDN for content delivery and using common JavaScript libraries like jQuery and Fancybox. The site is mobile-optimized with good navigation and SEO practices. Security-wise, the site enforces HTTPS and uses Facebook Pixel for marketing and analytics, but lacks visible security headers and a cookie consent mechanism, which are recommended for GDPR compliance. WHOIS data is unavailable due to query limits, but the website content and structure suggest a legitimate business. Overall, the site demonstrates a moderate level of digital maturity with room for improvement in privacy compliance and security best practices.

P

Prometal Group SIA

prometalgroup.lv

53

Prometal Group SIA is a Latvian manufacturing company specializing in steel constructions and metal processing services. Established in 1997, the company evolved from woodworking equipment maintenance to a broader metal processing and machine building business. It serves a primarily industrial B2B audience with services including laser cutting, CNC bending, welding, and production of steel structures. The company employs approximately 50 people and maintains long-term client relationships, positioning itself as a reliable regional player in the manufacturing sector. Technically, the website is built on the Mozello CMS platform, hosted via Amazon Cloudfront CDN, and utilizes common web technologies such as jQuery, Fancybox, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and comprehensive SEO optimizations. From a security perspective, the site uses HTTPS and includes tracking scripts but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WHOIS data was retrievable due to query limits, limiting domain legitimacy verification. Overall, the security posture is moderate but could be improved by implementing security headers, privacy policies, and incident response contacts. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic improvements in privacy compliance and security best practices would enhance trust and reduce potential regulatory risks.

L

www.lubanamitrajs.lv - Sākums

lubanamitrajs.lv

51

The website www.lubanamitrajs.lv represents the Lubāna Wetland Information Center, a small local tourism and nature information hub located at Latvia's largest lake, Lubāna. It provides visitors with tourism information, guided tours, event organization, accommodation, and active leisure opportunities focused on nature and the Lubāna wetland reserve. The site targets tourists, nature enthusiasts, students, and active leisure seekers in the region. Technically, the website is built on the Mozello CMS platform and uses a variety of JavaScript libraries including jQuery and Fancybox. It is hosted via AWS Cloudfront CDN and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and has a moderate performance profile. However, it lacks advanced SEO and accessibility features. From a security perspective, the site uses HTTPS but does not implement visible security headers or provide privacy and cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and trust. No WHOIS data was available due to query limits, restricting domain legitimacy verification. Overall, the website is functional and provides relevant content for its niche audience but requires improvements in privacy compliance, security best practices, and business transparency to enhance trust and regulatory adherence.

I

Ieva M-Eņģele

ievasimane.com

57

The website www.ievasimane.com represents a small business focused on adult sexuality education, coaching, and e-commerce of related products such as books and aphrodisiacs. The business targets mature adults interested in personal sexual development and relationships. The site is built on the Mozello CMS platform, leveraging modern web technologies including jQuery, Fancybox, and Amazon Cloudfront CDN for content delivery. It integrates Google Analytics and Facebook Pixel for marketing and user behavior tracking. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no direct incident response or security policy pages are found. WHOIS data is unavailable, indicating possible recent domain registration or privacy protection, which slightly reduces trust but is not uncommon for small businesses. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

L

Lindo grupa

lindogrupa.lv

56

Lindo grupa is a Latvian-based service provider specializing in laundry, dry cleaning, workwear cleaning and rental, and textile product sales. The company targets both private individuals and corporate clients, positioning itself as a local/regional player in the textile cleaning industry. The website content is well-structured, professionally designed, and provides clear information about services and contact details. The business model focuses on service delivery with physical pickup points and corporate contracts. Technically, the website is built on the Mozello CMS platform, leveraging common JavaScript libraries such as jQuery and Fancybox, and is hosted on AWS Cloudfront CDN ensuring reliable performance and HTTPS security. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. However, no terms of service or incident response information is provided, and WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms. Overall, the website is functional, trustworthy, and suitable for its business purpose but could benefit from enhanced security and compliance features.

S

SIA Skogsrav

skogsrav.lv

58

SIA Skogsrav is a Latvian licensed company specializing in movable property recovery, out-of-court debt collection, and legal services. The company holds official licenses from the Consumer Rights Protection Center and the State Police, underscoring its legitimacy and regulatory compliance. Their services target businesses and individuals requiring legal assistance and debt recovery solutions both domestically and internationally. The website is professionally designed, multilingual, and provides clear contact information and trust signals such as client logos and licensing details. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries like jQuery and Fancybox, and is hosted via Amazon Cloudfront CDN. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized with a cookie consent mechanism, indicating a good level of digital maturity and privacy compliance. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible advanced security headers and a dedicated security or incident response policy. No vulnerabilities or sensitive data exposures were detected in the HTML content. However, the absence of WHOIS data due to query limits restricts full domain trust verification. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is moderate with a recommendation to enhance security headers, publish security policies, and establish a vulnerability disclosure process. The website is trustworthy and professional, serving a niche legal services market in Latvia with clear compliance to local regulations.

S

SIA Mazo Brāļu Hospitālis

mbh.lv

47

Mazo Brāļu Hospitālis is a well-established veterinary clinic based in Latvia, with over 25 years of experience serving clients in Latvia and the Baltic region. The clinic offers a comprehensive range of veterinary services including emergency care, clinical examinations, diagnostics, surgery, and preventive treatments. Their business model includes both in-clinic services and an associated e-commerce platform for related products. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the site uses a mix of established JavaScript libraries and frameworks such as jQuery and Bootstrap, with integrations for Google Analytics and Tag Manager for tracking and marketing purposes. Mobile optimization and user experience are good, though accessibility could be improved.

S

Spāņu kultūras centrs Séneca

seneca.lv

53

Spāņu kultūras centrs Séneca is a small private educational institution in Latvia specializing in Spanish language courses and cultural activities. The center offers a variety of courses including regular, intensive, private lessons, and courses in Spain, complemented by cultural events, a library, and video resources. The website is well-structured, with clear navigation and good content quality, targeting Latvian residents interested in Spanish language and culture. Technically, the site uses Mozello CMS, is hosted on Amazon Cloudfront CDN, and employs several JavaScript libraries including jQuery and fancybox. While HTTPS is properly implemented, the site lacks security headers and formal privacy or cookie policies, indicating areas for compliance improvement. Social media presence on Facebook, Instagram, and YouTube supports business credibility. Overall, the site is safe, professional, and trustworthy but could enhance privacy compliance and security posture.

Krokus.lv is a well-established online florist and flower delivery service operating primarily in Riga and across Latvia. The company offers a wide range of fresh flower bouquets, arrangements, and related gifts, emphasizing professional floristry and timely delivery, including same-day service. Their platform supports multiple languages and provides a user-friendly e-commerce experience. Technically, the website employs modern JavaScript libraries and integrates with major analytics and advertising platforms such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification, but the business information and contact details are transparent and professional. Overall, Krokus.lv presents a credible and trustworthy online retail presence in the floral industry.

O

ORDO Property Management

ordoproperty.lv

43

ORDO Property Management is a Latvian-based small business specializing in professional real estate property management services. The company focuses on quality property maintenance and resident services, targeting property owners and residents primarily in Latvia. The website is professionally designed with clear navigation and multilingual support, reflecting a moderate level of digital maturity. The technical infrastructure includes common web technologies such as jQuery, Bootstrap, Google Maps API, and analytics tools like Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and detailed privacy policies. Cookie consent mechanisms are implemented, indicating some compliance with privacy regulations. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security practices and more transparent privacy and contact information.

Z

Ziedu un puķu veikals Elīna

elinasziedi.lv

54

Ziedu un puķu veikals Elīna is a small local flower shop based in Cēsis, Latvia, specializing in fresh flower bouquets, flower boxes, and delivery services. The website offers an e-commerce platform for customers to order flowers online with a focus on heartfelt gifting occasions such as birthdays, name days, and weddings. The business emphasizes personalized service and has over 20 years of experience in the floral retail sector. The site is well-branded, consistent, and targets a general audience interested in flower gifts. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries such as jQuery and Fancybox, and uses Amazon CloudFront as a CDN for hosting static assets. It includes accessibility features and is mobile optimized. SEO practices are good with proper meta tags and structured data in JSON-LD format describing the store and its contact details. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, and there is no published security.txt or vulnerability disclosure page. Forms are present with password fields but lack visible anti-CSRF tokens. Overall, the security posture is moderate with room for improvement. The risk assessment indicates a legitimate and trustworthy small business website with no signs of malicious activity or adult content. The absence of WHOIS data limits domain registration trust verification, but the website content and business information appear consistent and professional. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and implementing anti-CSRF protections to strengthen security and trust.

O

Ogres Vēstures un mākslas muzejs

ogresmuzejs.lv

54

Ogres Vēstures un mākslas muzejs is a regional cultural institution in Latvia focused on preserving and presenting the history and art of the Ogre region. The website provides detailed information about current and upcoming exhibitions, permanent collections, educational programs, and special events. The museum targets local residents, tourists, students, and art enthusiasts, positioning itself as a key cultural hub in the region. The business model is typical for a government or non-profit cultural entity, relying on public funding and community engagement. Technically, the website is built on a Mozello CMS platform, leveraging modern JavaScript libraries such as jQuery and Fancybox, and is hosted on Amazon Cloudfront CDN ensuring moderate performance and good availability. The site is mobile optimized and includes accessibility features, though these could be enhanced. Google Analytics is used for visitor tracking, but privacy and cookie policies are missing, indicating a compliance gap. From a security perspective, the site uses HTTPS and defers script loading to improve security and performance. However, it lacks important security headers and visible privacy compliance mechanisms. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to query limits, but the domain and content appear legitimate and consistent with a public cultural institution. Overall, the website is professional, informative, and trustworthy but should improve privacy compliance and security headers to enhance user trust and regulatory adherence.

B

Big Bad Bagels

bigbadbagels.lv

52

Big Bad Bagels is a small local food retail business based in Riga, Latvia, specializing in freshly baked bagels with high-quality ingredients. Established in 2015, it operates two physical locations and offers catering and franchising services. The website reflects a focused business model targeting local customers and visitors seeking authentic bagel experiences. Technically, the website uses a Mozello CMS platform with common web technologies such as jQuery, Fancybox, and Google Analytics, hosted via Amazon Cloudfront CDN. The site is mobile-optimized and provides clear navigation and relevant content. Security posture is basic with HTTPS enabled but lacks advanced security headers and privacy policies, indicating room for improvement in compliance and protection. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

A

Abgunstes muiža

abgunste.lv

51

Abgunstes muiža is a Latvian cultural and hospitality venue offering artist residencies, event hosting, and accommodation services in a historic manor setting. The website presents a well-structured, content-rich experience targeting creatives and cultural tourists. The technical infrastructure leverages Mozello CMS with common JavaScript libraries and Amazon Cloudfront CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and visible privacy policies, which are critical for compliance and trust. The absence of WHOIS data limits domain legitimacy verification. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

L

Laba Pica

labapica.lv

52

Laba Pica is a Latvian pizza restaurant providing a variety of pizzas, drinks, and sauces with an online ordering and delivery service. The website targets local consumers with a clear menu structure and ordering options. Technically, the site uses Mozello CMS, jQuery, and Amazon Cloudfront CDN, with Google Analytics for tracking. The site is served over HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS but lacks important security headers and privacy compliance mechanisms such as cookie consent and privacy policy pages. The absence of WHOIS data limits domain trust analysis, but the website content and social media presence support legitimacy. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

C

Cargobus

cargobus.lv

45

Cargobus is a regional courier and parcel delivery service operating primarily in Latvia, the Baltic states, and Europe. Established in 1992 and owned by T Grupp OÜ, the company offers courier services from courier to courier, courier to terminal, and additional related services. The website is professionally designed with good content quality and clear navigation targeting both business and individual customers in the region. The presence of partner logos and social media links enhances trust and market positioning. Technically, the website uses a modern tech stack including jQuery, Google Maps API, Google Tag Manager, and multiple tracking pixels such as Facebook and TikTok. It employs HTTPS and Google reCAPTCHA for security, though it lacks some advanced security headers and explicit incident response information. The site is mobile optimized and SEO friendly but could improve accessibility and cookie consent mechanisms. From a security perspective, the site demonstrates good baseline security practices with encrypted connections and no visible vulnerabilities. However, the absence of security headers and incident response details suggests room for improvement. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the website is trustworthy and professional with a solid business foundation. The lack of WHOIS data limits domain registration verification, but the business information and website content align well. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and trust.

E

Endzistyle

endzibaby.lv

17

Endzistyle is a family-owned retail business based in Latvia specializing in clothing and accessories for women, men, and children, with a focus on Latvian style and softshell products. The company operates both a physical store in Kuldīga and an e-commerce website offering a variety of apparel and related items. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages to cater to a broader audience. Technically, the site uses Mozello CMS, Cloudfront CDN, and common JavaScript libraries such as jQuery and Fancybox, alongside Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a comprehensive privacy policy. No WHOIS data was available due to query limits, but the domain appears legitimate based on website content and business presence. Overall, the site is suitable for general audiences with no adult content and moderate user tracking.

B

BUMBU TERAPIJA

bumbuterapija.lv

51

Bumbu Terapija is a Latvian hospitality business specializing in providing the largest ball pool venue in Latvia for children's parties and family events. The website offers detailed information about the venue, services, pricing, and booking options, targeting families with children. Technically, the site is built on the Mozello platform, leveraging modern JavaScript libraries and Amazon CloudFront CDN for content delivery. It integrates analytics and advertising tools such as Hotjar and Google Ads for marketing and user behavior tracking. Security posture is adequate with HTTPS and secure forms, but lacks some advanced security headers and privacy compliance features. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

B

BRANDMAN TM SIA

texbrands.eu

54

The website www.texbrands.eu represents BRANDMAN TM SIA, a Latvian small business specializing in wholesale promotional materials and branded workwear. The company offers a range of services including custom logo printing, embroidery, and 3D uniform design visualization, targeting business clients seeking marketing and corporate branding solutions. The site is well-structured with good content quality and consistent branding, supported by an e-commerce platform for product ordering. Technically, the site uses modern JavaScript libraries, CDN hosting, and is mobile optimized, though some accessibility features could be improved. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and formal privacy and terms pages. WHOIS data is privacy protected, typical for .eu domains, and does not raise suspicion. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

Karosta.lv is a tourism-focused website promoting the Karosta area in Latvia, emphasizing its unique military heritage, historical sites, and cultural events. The site targets tourists, history enthusiasts, and group travelers, offering services such as prison tours, fortress visits, accommodation in a former prison, escape room games, festivals, and local dining options. The business operates as a small regional tourism entity with a niche market position. Technically, the website is built on the Mozello CMS platform, leveraging jQuery and several UI libraries, and is hosted via Amazon CloudFront CDN. The site is moderately optimized for mobile devices and performance but lacks advanced SEO and accessibility features. No structured metadata or analytics services were detected. From a security perspective, the site uses HTTPS but lacks visible security headers and comprehensive privacy or cookie policies. The login form is present but does not show advanced security controls such as CSRF tokens. No WHOIS data was available due to query limits, but the website content and structure appear legitimate. Privacy protection on WHOIS is likely justified for this business type. Overall, the website is functional and professional but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to increase trust and compliance with regulations.

P

ppkokles - Sākums

ppkokles.lv

35

The website www.ppkokles.lv represents a small Latvian artisan business specializing in the manufacturing, repair, and rental of kokles, a traditional Latvian string instrument. The business offers a range of services including custom kokles production with or without levers, restoration, and sales of related accessories. The target audience is primarily Latvian-speaking customers interested in traditional musical instruments. The website is built on the Mozello CMS platform, leveraging common web technologies such as jQuery and Fancybox, and is hosted via Amazon Cloudfront CDN. It includes Google Analytics for visitor tracking but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enforced but missing key security headers and privacy compliance elements such as cookie and privacy policies. The site includes a login form but lacks visible advanced security controls like CAPTCHA. Social media presence is established on Twitter, Facebook, and Instagram, enhancing business visibility. Overall, the website is functional and professionally designed but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

H

Hotel Gong Štramberk

hotel-gong.cz

53

Hotel Gong Štramberk is a family-run hospitality business located in Štramberk, Czech Republic, offering a variety of accommodation options, restaurant services, and tourism packages. The website is professionally designed with clear navigation, multilingual support (Czech and English), and comprehensive information about rooms, packages, and local tourism. The business holds a recognized quality certificate from Hotel.cz, indicating a reputable market position in the local hospitality sector. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Complianz for GDPR compliance, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and WHOIS data transparency slightly reduce trustworthiness. Overall, the site is safe, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

A

ABB Consulting s.r.o.

helpgdpr.cz

53

HelpGDPR.cz is a Czech knowledge platform focused on GDPR compliance, offering news, training materials, templates, and advisory content. The site is operated by ABB Consulting s.r.o. and targets a broad audience interested in data protection and GDPR regulations. The platform is well-structured, professionally designed, and regularly updated, positioning itself as a reputable source for GDPR-related information in the Czech Republic. Technically, the site uses IBM Domino CMS with standard web technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and explicit incident response or security policies. WHOIS data is unavailable, which slightly impacts trust but the site content and presentation support legitimacy. Overall, the site is safe, compliant with GDPR, and serves as a valuable resource for GDPR knowledge and compliance guidance.

W

Wargaming.net Limited

worldoftanks.asia

61

World of Tanks Asia is a regional portal operated by Wargaming.net Limited, offering a popular free-to-play MMO tank battle game targeting gamers in Asia and Australia. The website provides comprehensive game-related content, community features, and access to in-game purchases through a premium shop. The business is well-established with a domain age consistent with its market presence and operates under a reputable parent company. Technically, the site uses a modern JavaScript stack with frameworks like jQuery, Knockout, and employs Google Tag Manager and OneTrust for analytics and privacy compliance. Security practices include HTTPS enforcement, CSRF protection, and domain transfer restrictions, though some advanced security headers and policies could be improved. Privacy and cookie policies are clearly presented and GDPR compliant. No direct contact emails or phone numbers are publicly listed, which is typical for gaming portals relying on support portals. Overall, the site is professional, trustworthy, and well-maintained.

W

Wargaming.net

worldoftanks.com

67

World of Tanks is a globally recognized free-to-play online multiplayer tank game operated by Wargaming Group Limited. The website serves as the official portal for game information, community engagement, and player support. It targets MMO gamers and tank enthusiasts worldwide, offering a comprehensive gaming experience with clan management and tournaments. The business model relies on free access with monetization through in-game purchases and premium content. The domain's age and registration details align well with the company's history, supporting its legitimacy and market presence. Technically, the website employs a modern and robust technology stack including jQuery, Lodash, Google Tag Manager, and OneTrust for consent management. The site is well optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. SEO and metadata are properly implemented, enhancing discoverability and user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. CSRF protection and cookie security measures are in place, alongside a comprehensive cookie consent mechanism. However, the absence of a publicly available security policy or incident response contact limits transparency in security governance. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, security, and compliance with privacy regulations such as GDPR. It maintains strong trust indicators and a positive reputation in the gaming community. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a security.txt file to enhance vulnerability disclosure and incident response readiness.

N

Národní muzeum

nm.cz

53

Národní muzeum is the Czech Republic's national museum institution, providing a wide range of cultural, educational, and exhibition services to the public. The website offers comprehensive information about museum objects, exhibitions, events, and online content such as podcasts and virtual tours. It targets a broad audience including families, schools, researchers, and tourists. The institution is positioned as a leading government cultural entity with strong partnerships and a modern digital presence. Technically, the website employs a mix of established technologies including jQuery, Google Tag Manager, and Facebook Pixel, with good mobile optimization and accessibility features. The site uses HTTPS and implements a detailed cookie consent mechanism, reflecting a commitment to privacy compliance. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided. From a security perspective, the site demonstrates good practices such as encrypted connections and privacy controls but could improve by publishing security policies and enhancing HTTP security headers. The absence of WHOIS data limits domain registration trust assessment, though the website content and external references strongly indicate legitimacy. Overall, the site is professional, content-rich, and user-friendly, with moderate to strong security and privacy postures. Strategic improvements in security transparency and domain registration visibility would further enhance trust and compliance.

W

Wargaming.net

worldoftanks.eu

63

World of Tanks EU is the European portal for the popular MMO tank battle game developed by Wargaming.net. The website serves as a gateway for players to access game information, community features, clan wars, and tournaments. It targets gamers interested in mid-20th century armored warfare and offers a free-to-play business model with in-game purchases. The site is well-branded and maintains a consistent professional appearance, reflecting its position as a leading online multiplayer game in Europe. Technically, the site employs a modern JavaScript stack including jQuery, Lodash, and Google Tag Manager, with cookie consent managed by OneTrust, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is accessible, trustworthy, and professionally maintained, with room for improvement in privacy and security transparency.

G

Greater Nashville REALTORS®

greaternashvillerealtors.org

62

Greater Nashville REALTORS® is a well-established regional REALTOR association serving real estate professionals in the Greater Nashville area. With a history spanning over 128 years, the organization provides membership services, professional development, advocacy, market data, and events to support its members. The website reflects a professional and consistent brand image aligned with its mission to unite and support real estate professionals. Technically, the site uses a modern JavaScript stack including jQuery, Google Tag Manager, and accessibility tools, hosted on the Accrisoft Freedom CMS platform. The site is mobile-optimized and provides clear navigation and relevant content. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers are not detected and no incident response or vulnerability disclosure information is published. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable due to malformed query output, which reduces domain trustworthiness but the website content and branding strongly indicate legitimacy. Overall, the site is a credible and professional resource for its target audience.

The website www.visitguam.com serves as a comprehensive tourism portal for Guam, offering detailed information on events, places to stay, cultural insights, and travel planning resources. It targets tourists and travelers interested in exploring Guam, positioning itself as a primary or official tourism information source. The site features a well-structured navigation system and rich content relevant to hospitality and travel. Technically, the site employs a moderate technology stack including jQuery, RequireJS, Foundation framework, and various third-party analytics and marketing tools. The site appears mobile-optimized with good SEO practices but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS usage inferred but no explicit security headers detected. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content is professional and consistent with its business purpose. Overall, the site is functional and informative but would benefit from improved transparency and security practices.

S

State of Alaska

alaska.gov

66

The State of Alaska's official website serves as a comprehensive portal for residents, businesses, visitors, and state employees, providing access to a wide range of government services and information. It is well-structured with clear navigation and covers multiple departments and agencies, reflecting its role as a central government resource. The website's market position is authoritative as the official state government domain, with a large audience and extensive service offerings. Technically, the site uses a legacy but stable technology stack including jQuery and Bootstrap, hosted with reliable DNS providers. It is mobile optimized and accessible, though performance is moderate. Google Analytics is used for visitor tracking, but there is no visible cookie consent mechanism or explicit privacy policy, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and security headers. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact reduces transparency. Overall, the security posture is solid but could be enhanced with modern best practices. The website is safe for general audiences, contains no adult or questionable content, and maintains a high level of trustworthiness consistent with its government status. Strategic improvements in privacy and security disclosures would further strengthen its compliance and user trust.

Simpleview is a technology company specializing in providing destination marketing organizations (DMOs) with integrated solutions such as a booking referral engine, content management system, CRM, and event management tools. Their platform enables DMOs to retain 100% of lodging revenue by allowing visitors to book directly through their websites. The company positions itself as a key player in the tourism technology sector, offering a comprehensive suite of products and services tailored to the needs of tourism professionals and marketers. The website reflects a mature digital presence with clear navigation, professional design, and extensive product information.

T

The Iowa State Bar Association

iowabar.org

58

The Iowa State Bar Association (ISBA) is a well-established professional organization serving legal professionals in Iowa. It provides a broad range of services including continuing legal education, member benefits, legislative advocacy, and public legal resources. The website reflects a mature digital presence with active event calendars, news updates, and member services, targeting attorneys, law students, and the public seeking legal assistance. The ISBA maintains partnerships with reputable legal service providers and sponsors, enhancing its service offerings. Technically, the website employs a mix of legacy and modern web technologies including jQuery, Bootstrap, and Datadog for logging and analytics. The platform is built on MemberCentral CMS, supporting dynamic content and member management. While the site is mobile-optimized and offers good user experience, there is room for improvement in accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses error logging tools but lacks several standard security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, which slightly impacts trust but the professional nature of the site and consistent branding mitigate concerns. Overall, the ISBA website is a credible and professional platform with good content quality and business credibility. Strategic improvements in security headers, library updates, and privacy compliance would enhance its security posture and regulatory adherence.

The website www.iowapublicnotices.com serves as a public notice platform affiliated with the Iowa Newspaper Association, providing users with access to legal and public notices across Iowa. It targets a general audience including residents, businesses, and government entities seeking official public information. The platform offers search capabilities with filters by county, city, and publication, supporting transparency and public awareness. Technically, the site is built on ASP.NET WebForms with jQuery and Modernizr, and integrates Google Tag Manager for analytics. The design is professional and mobile-optimized, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and updated libraries. Privacy and cookie policies are not detected, which is a compliance gap. WHOIS data is unavailable, raising concerns about domain registration transparency. Overall, the site is functional and trustworthy in content but requires improvements in security and privacy compliance.

ArizonaPublicNotices.com is a public service website operated by the Arizona Media Association, providing free access to public notices published in newspapers across Arizona as mandated by law. The site offers a searchable database of notices and an optional paid subscription service called Smart Search for expedited email delivery of customized notices. The website is professionally designed with clear navigation and is mobile optimized, leveraging ASP.NET Web Forms technology and common web libraries such as jQuery and Modernizr. It integrates Google Tag Manager for analytics and Google Translate for multilingual support. However, the site lacks explicit privacy and cookie policies, which impacts privacy compliance. The WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy despite the active and functional website. Contact information is limited to an email address in the footer, with no phone numbers or physical addresses provided. Security headers and advanced security policies are not evident, though HTTPS is used. Overall, the site serves its public service function well but would benefit from enhanced privacy disclosures and verification of domain registration.

ArkansasPublicNotices.com is a public service website operated under the Arkansas Press Association, providing searchable access to public notices originally published in Arkansas newspapers. The platform targets citizens interested in government and court activities, offering advanced search capabilities by location, publication, and date. The website uses ASP.NET WebForms technology with modern JavaScript libraries and Google Analytics for tracking. While the site is functional and professionally designed, it lacks visible privacy and cookie policies, and WHOIS data for the domain is missing, raising legitimacy concerns. Security posture is moderate with HTTPS usage but no detected security headers. Overall, the site serves an important public function but would benefit from enhanced compliance and security measures.