Security Directory

A

ANNAS KOKU SKOLA

annaskokuskola.lv

62

ANNAS KOKU SKOLA is a hospitality business based in Latvia offering event spaces, overnight accommodations, and park access for various occasions including corporate and private events. The website is built on the Squarespace platform, leveraging standard web technologies such as Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is well-designed with good navigation and mobile optimization, providing a positive user experience. Security posture is solid with HTTPS and HSTS enabled, though the absence of explicit privacy policies and contact information limits full compliance and trust. Overall, the business presents a professional online presence suitable for its market segment but would benefit from enhanced privacy and security disclosures.

Bauskas muzejs is a cultural institution dedicated to preserving and showcasing archaeological, ethnographic, historical, and artistic artifacts related to the Bauska region in Latvia. The website serves as an informational portal for visitors and stakeholders, providing access to museum exhibitions and contact details. The organization appears to be a small regional museum with a focus on cultural heritage preservation. Technically, the website is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery and Google Fonts. It incorporates accessibility features via EqualWeb and implements privacy consent mechanisms compliant with GDPR. The site uses HTTPS and Google Analytics for visitor tracking, but lacks some advanced security headers which could enhance its security posture. From a security perspective, the site demonstrates moderate maturity with encrypted connections and privacy controls but could improve by adding HTTP security headers and enhancing form security. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, though the website content aligns with a legitimate cultural institution. Overall, the website is functional, accessible, and provides essential information for its audience. Strategic improvements in security headers and domain verification would strengthen trust and compliance.

T

Tukuma muzejs

tukumamuzejs.lv

59

Tukuma muzejs is a regional cultural institution based in Tukums, Latvia, providing museum exhibitions, educational programs, and cultural events. The website serves as an information portal for the museum's branches and activities, targeting local residents, students, and cultural tourists. The institution operates primarily as a non-profit entity supported by local government funding. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Google Maps API, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and cookie consent mechanisms, which could be improved to enhance compliance and protection. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the website content and structure indicate a trustworthy and professional cultural organization.

DVS auto is a small automotive service company based in Riga, Latvia, specializing in comprehensive repair and maintenance services for light vehicles, trucks, trailers, and commercial transport. Established in 2017, the company offers a wide range of services including mechanical repairs, tire fitting, wheel restoration, spare parts sales, and autonomous heater diagnostics and repair. The website presents detailed service descriptions, a gallery of completed work, and clear contact information, positioning the company as a local trusted service provider in the transportation sector. Technically, the website employs a modern but basic technology stack including jQuery, Bootstrap, Slick Carousel, and Lightbox, with Google Analytics and Tag Manager for tracking. The site is mobile optimized and provides a cookie consent mechanism, but lacks visible privacy and terms of service pages. No CMS or hosting provider details are evident. Performance is moderate with good navigation and content relevance. From a security perspective, the site lacks visible security headers and there is no information about HTTPS or SSL configuration in the provided data. The cookie consent popup is a positive privacy feature, but the absence of privacy policy and incident response contacts indicates gaps in compliance and security posture. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website is functional and professional with moderate trustworthiness. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance the security posture and compliance standing, reducing risk and improving customer trust.

F

Forest of Dreams - Sākums

forestofdreams.lv

56

Forest of Dreams is a small Latvian hospitality business specializing in organizing children's parties, thematic event decoration, and related educational and entertainment activities. The website presents a well-structured and visually appealing platform built on Mozello CMS, leveraging modern JavaScript libraries and Amazon CloudFront CDN for content delivery. Tracking tools such as Google Analytics and Facebook Pixel are integrated with cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of a published privacy policy and terms of service, as well as missing explicit contact information, limits the site's compliance posture. Security headers are not detected, and WHOIS data is unavailable due to query limits, though the domain appears legitimate based on content and presentation. Overall, the site is safe for general audiences and provides a good user experience with room for improvement in privacy and security practices.

N

Nipal, SIA

npcarrent.lv

50

Npcarrent.lv is a Latvian small business specializing in car rental services, offering a broad range of vehicles and an easy online reservation system. The company positions itself as a reliable and customer-focused partner for various travel needs, including business trips and leisure. Their website reflects a professional and consistent brand image with clear contact information and multilingual support. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for enhanced user experience and filtering capabilities. The presence of a cookie consent banner and structured data indicates attention to privacy compliance, particularly GDPR. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and incident response disclosures. WHOIS data is unavailable due to query limits, slightly impacting trust evaluation. Overall, the site is well-maintained, user-friendly, and trustworthy for its business domain.

The website labologuagentura.lv currently presents a BitNinja CAPTCHA security challenge page, blocking access to its actual content. This indicates the site is protected by a Web Application Firewall (WAF) to prevent automated or malicious access. The visible metadata and scripts reveal the use of outdated CMS platforms (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities. The site employs Google Analytics and Google Tag Manager for tracking, and uses Google reCAPTCHA v2 for bot mitigation. However, no privacy, cookie, or terms of service policies are found, and no contact or business information is publicly accessible. WHOIS data is unavailable due to query limits, preventing verification of domain registration details. Overall, the site’s technical infrastructure appears outdated and the security posture is limited to basic bot protection, with significant gaps in transparency and compliance.

G

GRIEZE

grieze.lv

54

GRIEZE is a small local beauty salon based in Riga, Latvia, offering a comprehensive range of hairdressing and nail care services including haircuts, braiding, coloring, styling, hair recovery treatments, and manicure/pedicure services. The website positions the business clearly for local customers seeking beauty salon services. The company maintains an active presence on multiple social media platforms, enhancing its local market reach. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Analytics and Facebook Pixel for user tracking and marketing insights. The site is mobile-optimized with good design quality and clear navigation, providing a positive user experience. Security-wise, the site uses HTTPS but lacks several important security headers such as HSTS and CSP, which could be improved to enhance protection. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service, indicating room for improvement in regulatory adherence. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy documentation to strengthen its compliance posture.

Kempings “Miķeļbāka” is a small hospitality business based in Latvia offering seaside camping and accommodation services including cabins, trailer spots, and tent sites. The website is professionally designed using WordPress and includes multilingual support, clear navigation, and contact information. The technical infrastructure includes common web technologies such as jQuery, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and secure form inputs, but lacks some security headers and explicit privacy and cookie policies, which are important for compliance. Overall, the website presents a trustworthy and professional image, but the absence of WHOIS data limits full domain legitimacy verification.

T

Thread solutions | industrial sewing thread | Latvia

threadsolutions.lv

52

The website www.threadsolutions.lv is currently inaccessible for full content analysis due to security or WAF blocking mechanisms, as indicated by the WHOIS query limit error and truncated HTML content. Consequently, no detailed business, contact, or policy information could be extracted. The site appears to be built on the Wix platform, but no further technical or business details are available. The lack of accessible WHOIS data prevents verification of domain legitimacy or age. Security posture cannot be assessed accurately due to limited data. Overall, the site’s risk profile is elevated due to lack of transparency and content access.

M

Maktool R tehnikas centrs

maktool.lv

43

Maktool.lv is a Latvian-based professional e-commerce retailer specializing in high-quality power tools, hand tools, welding equipment, and accessories from well-known brands such as Makita, Bosch, and Milwaukee. The company targets professionals and consumers in the construction and gardening sectors, offering both retail and wholesale services. The website is built on WordPress with WooCommerce, featuring modern plugins and tracking technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, although some security headers are missing and explicit privacy and terms of service pages are absent. The lack of WHOIS data limits full domain trust verification, but the business information and contact details are clearly presented, supporting a medium trust level overall.

Travel To Tanzania Ltd Sia is a small-sized, essential entity operating as a professional tour operator specializing in safari tours, mountain climbing, and beach holidays in Tanzania and East Africa. The company targets tourists primarily from Europe and North Europe, offering a variety of safari packages, cultural tours, and honeymoon services. The website is built on the Jimdo CMS platform, featuring a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published privacy policies. WHOIS data for the domain is missing, raising concerns about domain registration legitimacy. Overall, the website presents a professional image with clear contact information and detailed service offerings but requires improvements in privacy compliance and domain registration transparency.

M

Magic

magicagency.lv

55

Magic is a full-service advertising agency based in the Baltics, recognized as the Baltic Agency of the Year 2024. The company partners with major Baltic brands to deliver comprehensive marketing solutions including campaigns, strategy, design, digital solutions, production, and activations. Their website reflects a professional and modern digital presence, built on the Webflow platform with integration of Google Analytics and Typekit fonts. The site is well-designed with good user experience and mobile optimization, targeting business clients in the Baltic region. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security posture. WHOIS data was unavailable due to query limits, limiting domain registration verification. Overall, Magic presents as a credible and established agency with a solid market position but should enhance its privacy and security disclosures to align with best practices.

A

Apdrošināšanas un Finansu Brokers

financebroker.lv

40

Apdrošināšanas un Finansu Brokers is a Latvian insurance brokerage company positioned among the top three in the local market by premium volume for over a decade. The company offers a broad portfolio of insurance products including health, vehicle (OCTA, KASKO), property, travel, life, and accident insurance, serving corporate clients, government entities, and private individuals. Their business model focuses on brokerage and consulting services, leveraging partnerships with over 30 insurance providers domestically and abroad. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. Technically, the website is built on WordPress using Cherry Framework and common web technologies such as jQuery and Bootstrap. It integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized with good user experience and basic accessibility features. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, WHOIS data could not be retrieved due to query limits, limiting domain registration trust analysis. Overall, the security posture is adequate but could be improved with enhanced headers and documented policies. The overall risk assessment is low, with the website appearing trustworthy and professionally managed. Strategic recommendations include implementing comprehensive security headers, publishing incident response information, and improving SEO and accessibility. These steps will enhance security, compliance, and user trust, supporting the company’s strong market position.

A

AP&S Aviation

aviationps.com

66

AP&S Aviation is a well-established aviation aftermarket service provider founded in 2007, specializing in aircraft spare parts supply, component support, repair management, consignment stock sales, and 24/7 AOG support services. The company serves a global clientele including 180 airlines across 80 countries, positioning itself as a reliable partner in the aviation transportation sector. Their website reflects a professional and consistent brand image with clear service offerings and a global service network. Technically, the site is built on WordPress using the Avada theme and Slider Revolution, hosted with GoDaddy and DNS managed by Cloudflare, indicating a modern and stable infrastructure. Security posture is adequate with HTTPS and domain locking but lacks advanced security headers and DNSSEC. Privacy compliance is basic with presence of privacy and cookie policies but no explicit consent mechanisms or GDPR compliance indicators. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

T

Tīklu Parks

tikluparks.lv

53

Tīklu Parks is a small Latvian business operating the first and only rope park in Latvia, offering outdoor recreational activities elevated 4-7 meters above ground. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix technologies and scripts. The site content is primarily in Latvian, targeting local families and outdoor enthusiasts. The business appears legitimate and focused on providing a unique leisure experience. Security posture is basic, with no advanced security headers or policies detected, and WHOIS data could not be retrieved due to query limits. Privacy and cookie policies are absent, which may impact compliance with GDPR regulations. Overall, the site is functional and professionally designed but would benefit from enhanced security and compliance measures.

B

Baltem

baltem.lv

53

Baltem is a Latvian company specializing in the sale and service of construction machinery and modern agricultural equipment. Their website highlights partnerships with brands like Komatsu and Deutz-Fahr, targeting professionals and businesses in construction and agriculture sectors. The site is bilingual (Latvian and English) and presents a professional but basic digital presence. Technically, the site uses modern web technologies including Google Analytics and Tag Manager for tracking, and Foundation framework for layout. The site is mobile optimized and has a cookie consent mechanism, but lacks visible privacy policy and terms of service pages. Security posture is moderate with HTTPS usage implied but no advanced security headers detected. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site is functional and professional but could improve transparency and security documentation.

S

Saloni LABI

shop.labi.lv

51

Saloni LABI is a Latvian retail and e-commerce business specializing in adult intimate products, including pleasure devices and accessories. The company operates physical salons and an online store, TEV.LV, targeting adult customers with a focus on quality and Scandinavian design products. The website is built on WordPress and uses common web technologies such as jQuery and Google Fonts. It includes cookie consent mechanisms and Google Analytics for tracking. However, the site lacks visible contact emails, phone numbers, and detailed security or privacy policies beyond a basic privacy policy linked externally. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site presents a professional and consistent brand image with clear adult content warnings and age restrictions.

F

Falkors Bouldering Center

boulderings.lv

53

Falkors Bouldering Center is the largest bouldering gym in the Baltics, located in Riga, Latvia. The business offers a modern climbing facility with a variety of routes for all skill levels, supported by professional trainers providing group and individual sessions. Their services extend to team building events, kids parties, and an online shop, targeting climbing enthusiasts and fitness seekers in the region. The website is built on the Squarespace platform, featuring a professional design, mobile optimization, and integration with social media channels such as Instagram, Facebook, and TikTok. Technical infrastructure includes modern web technologies and tracking tools like Facebook Pixel and Hotjar, with GDPR-compliant cookie consent mechanisms in place. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and policies could enhance protection. The absence of a privacy policy and terms of service pages represents a compliance gap. WHOIS data was unavailable due to query limits, limiting domain registration verification. Overall, the site presents a credible and professional online presence for a medium-sized hospitality business.

H

HQ Chipper Parts

chipperparts.eu

54

HQ Chipper Parts is a Latvia-based manufacturer and supplier specializing in precision-engineered wood chipper parts, serving a broad European customer base with over 2500 clients. The company emphasizes quality, durability, and performance, leveraging premium materials like Hardox and Duroxite wear plates. Their business model focuses on manufacturing, repair, and restoration services, supported by a multilingual e-commerce platform built on WordPress and WooCommerce. The website reflects a professional digital presence with good content quality and user experience, targeting forestry and industrial equipment sectors. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and reCAPTCHA for security. The platform is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is solid with HTTPS and CAPTCHA protections, but could be enhanced by implementing additional security headers and publishing incident response policies. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates a trustworthy and credible business presence with transparent contact information and active engagement in industry events. There are no critical security vulnerabilities detected, and the WHOIS data aligns well with the business claims, indicating legitimacy. Strategic improvements in security policies and technical hardening would further strengthen their security posture and customer trust.

В

Виктория Даракова

yantra.lv

53

Yantra.lv is a personal brand website operated by Viktoria Darakova, offering online education and consultations in astrology, Vedic numerology, Vastu Shastra, and yoga therapy. The site also organizes spiritual yoga tours to various sacred locations such as the Himalayas, Nepal, Tibet, and other destinations. The business targets Russian-speaking audiences interested in spiritual and wellness practices, operating primarily as a small educational and consulting service provider. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries and cloud-based CDN hosting for performance. It integrates multiple analytics and marketing tools including Google Analytics, Yandex Metrika, Facebook Pixel, and Google Tag Manager, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit advanced security headers and public security policies. The absence of WHOIS data limits domain trust verification, but the website content and structure suggest a legitimate and professional small business presence.

S

SIA Homeopātija

homeopatiskaaptieka.lv

63

The website represents SIA Homeopātija, a small healthcare business specializing in homeopathic medicines with a long-standing history dating back to 1833. It operates physical pharmacy locations in Riga, Latvia, and maintains an online presence linking to a partner online pharmacy. The site targets customers interested in natural and homeopathic remedies, providing educational content and retail services. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, offering a responsive and user-friendly experience. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible advanced security headers and explicit security policies. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations.

AQRM is a small investment management and advisory firm specializing in emerging markets, foreign exchange, and precious metals. The company offers tailored asset management solutions based on client preferences and employs a macro, top-down investment strategy focused on capital purchasing power preservation. The firm operates primarily in Latvia and targets investors seeking specialized financial services. The website uses modern web technologies such as React and Next.js, with Wagtail CMS inferred from image data. However, the site currently suffers from a client-side application error that impacts user experience and may reduce trust. Security posture is moderate with use of HTTPS and Google reCAPTCHA but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie policy present but no visible privacy or terms of service pages on the main domain. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but requires technical and security improvements to enhance professionalism and trust.

P

Privātā vidusskola ĀBVS

abvs.lv

54

Privātā vidusskola ĀBVS is a private secondary school based in Ādaži, Latvia, offering educational services focused on student development and community engagement. The website reflects a well-structured educational institution with clear contact information, social media presence, and collaboration with various partners. The school provides consultations, extracurricular activities, and participates in multiple projects, indicating an active educational environment. Technically, the website uses modern front-end technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. WHOIS data could not be retrieved due to query limits, limiting full domain trust verification. Overall, the website is professional, safe, and credible, serving its target audience effectively.

A

APSARA TĒJU FABRIKA

apsara.lv

56

Apsara Tea is a small Latvian retail company specializing in a variety of tea products including tea bags, loose tea, exclusive blends, and organic options. They also offer private label services, targeting general consumers and businesses interested in branded tea products. The website presents a consistent brand image with a focus on product assortment and social media engagement. Technically, the website uses standard web technologies such as JavaScript, CSS, Google Fonts, and Font Awesome icons, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, but lacks advanced security headers and comprehensive privacy documentation. The absence of WHOIS data limits domain legitimacy verification, and no explicit privacy policy or terms of service pages were found, which are important for compliance and trust. Overall, the website is functional and professional but could improve in privacy, security, and content depth to enhance user trust and regulatory compliance.

T

Tikarishop.lv

tikarishop.lv

57

Tikarishop.lv operates as an e-commerce retailer specializing in skateboarding equipment and streetwear, targeting skate culture enthusiasts worldwide. The business presents itself as a niche player with a focus on brand variety and cultural vibe, founded around 2022. The website is built on a modern WordPress and WooCommerce platform, leveraging Elementor for design and integrating Google Analytics and Facebook Pixel for marketing and analytics. The technical infrastructure is solid with good mobile optimization and SEO practices, though some security headers are missing. Contact information and social media presence enhance trustworthiness. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional and functional with room for security and compliance improvements.

The website felimur.lv represents the Latvijas Felinoloģiskā Asociācija, a Latvian feline association focused on cat breeding, exhibitions, and club activities. The site provides information about club management, breeders, exhibitions, kittens, breeds, and club documents, targeting cat breeders and enthusiasts primarily in Latvia. The business model appears to be a non-profit or association structure serving a niche community. The website content is basic but relevant, with moderate branding consistency and trust indicators such as contact information and partner links. Technically, the site uses legacy JavaScript libraries like jQuery and SWFObject, with no modern CMS or frameworks detected. Performance and mobile optimization are basic, and accessibility and SEO are minimal. No analytics or tracking scripts were found, indicating minimal user tracking. Security posture is weak due to lack of visible HTTPS confirmation and absence of security headers. Privacy and cookie policies are missing, reducing compliance with GDPR and other regulations. Overall, the security posture is low with no incident response or security policies visible. The WHOIS data could not be retrieved due to query limits, limiting domain trust analysis. The site is accessible with no WAF or blocking detected. The content is safe for general audiences with no adult or explicit material. Strategic improvements include implementing HTTPS, adding security headers, updating legacy scripts, and publishing privacy and cookie policies to enhance compliance and trust.

P

Prime Car Rent

primecarrent.com

59

Prime Car Rent is a regional car rental service operating primarily in the Baltic capitals of Riga, Tallinn, and Vilnius. The company offers brand-new vehicles with flexible rental conditions and a small deposit, targeting travelers and local customers seeking reliable transportation. The website is professionally designed, supports multiple languages, and provides clear navigation and booking functionalities. Customer trust is supported by real reviews and links to external review platforms such as Google, Trustpilot, and Facebook. Technically, the site uses modern web technologies including Google Tag Manager, Hotjar, and Google Maps API, hosted behind Cloudflare for performance and security. Security posture is good with HTTPS enforced and domain registration stable and consistent with business claims. However, the site lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement to enhance GDPR compliance and security transparency.

K

Kapitel

kapitel.lv

50

Kapitel is a prominent real estate company operating in the Baltic region, specializing in the development, ownership, and management of commercial properties including retail, office, hotel, and industrial spaces. The company positions itself as a long-term partner for tenants, emphasizing quality and scale. The website reflects a mature digital presence built on WordPress with modern technologies such as Bootstrap and Google Tag Manager, supporting multilingual content and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market position.

A

Axcelere metal

axceleremetal.lv

54

Axcelere metal is a Latvian-based e-commerce retailer specializing in construction and roofing materials, including roof windows, roofing tools, membranes, and copper roofing solutions. The company targets construction professionals and home builders within Latvia, offering a niche product range focused on quality roofing and building supplies. Their market position is that of a specialized regional supplier with a focused product catalog and active social media presence. The website is built on the Mozello CMS platform and hosted via Amazon Cloudfront CDN, leveraging modern web technologies such as jQuery and Google Analytics for user tracking and engagement. From a technical perspective, the website demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. Security posture is decent with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and explicit security policies indicates room for improvement. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for a small business in the manufacturing and retail sector. The lack of WHOIS data limits full verification of domain legitimacy, but the site content and external signals suggest a legitimate operation. Privacy compliance is addressed with a privacy policy and cookie banner, aligning with GDPR requirements. The business could enhance its security posture by implementing additional HTTP security headers and publishing incident response information. The risk assessment is moderate with no immediate red flags, but strategic improvements in security and transparency would strengthen trust and compliance. Recommendations include enhancing security headers, updating JavaScript libraries, and providing clear security and incident response documentation.

Clean Baltic is a Latvian company specializing in ventilation cleaning and disinfection services, operating since 2007. The company serves both corporate clients such as restaurants, stores, and industrial facilities, as well as private residential customers. Their services include dust and fat removal from air ducts, video inspection, waste duct cleaning, and disinfection. The company emphasizes professionalism, quality, and customer satisfaction, supported by certifications and notable client references. Technically, the website is built with standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS assumed but lacking advanced security headers and privacy policies. Contact information is clearly presented, but privacy and cookie policies are missing, which impacts compliance. Overall, the website is professional and trustworthy but could improve in security and privacy compliance.

V

VECRĪGAS ZIEMASSVĒTKU TIRDZIŅŠ

vzt.lv

45

VECRĪGAS ZIEMASSVĒTKU TIRDZIŅŠ operates a culturally rich Christmas market event located in the heart of Riga, Latvia. The website serves as an information hub for visitors and participants, offering event schedules, participant details, and cultural programming. The site targets a general audience including families and tourists interested in traditional Latvian Christmas festivities. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. Overall, the website appears legitimate and trustworthy, with active social media engagement and a clear business focus on event organization.

L

Lana Style

lanastyle.lv

56

Lana Style is a Latvian-based beauty studio and training center offering a variety of beauty procedures and professional education for beauty specialists. The website is built on WordPress with WooCommerce integration, indicating a moderate level of digital maturity. The site is well-branded and provides clear contact information and social media presence, targeting local customers and professionals in the beauty industry. Technically, the site uses common plugins and libraries but lacks advanced security headers and privacy policies, which are important for compliance and trust. The security posture is adequate with HTTPS enabled but could be improved with additional headers and policies. Overall, the website presents a legitimate small business with room for enhancement in privacy and security practices.

B

BGR Rubber

bgfrubber.com

69

BGF Rubber is a well-established industrial rubber manufacturer based in Latvia, operating since 2003. It holds a leading market position in the Baltics region, offering a broad range of rubber compounds and technical rubber parts tailored for multiple industries including transportation, energy, and manufacturing. The company emphasizes flexibility, customization, and quality, supported by ISO 9001 certification and strong partnerships with notable industry players. The website reflects a professional digital presence with multilingual support and clear business information. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Cloudflare for DNS and CDN services. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though improvements could be made by enabling DNSSEC and additional security headers. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital footprint with good SEO and user experience, supporting the company’s credibility and trustworthiness.

H

Holandiesi Holiday Houses

holandiesi.com

56

Holandiesi Holiday Houses operates a website offering holiday rental accommodations in traditionally built loghouses located in Latvia. The business targets tourists and holiday renters seeking authentic lodging experiences. The website is built on the Wix platform, utilizing standard Wix technologies and includes tracking via Google Analytics and Facebook Pixel. The site presents a professional design with good content relevance and navigation, optimized for mobile devices. However, it lacks critical privacy and cookie policies, terms of service, and incident response information, which are important for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but missing security headers and policies. Overall, the website serves its business purpose but requires improvements in privacy, security, and domain registration transparency to enhance trust and compliance.

C

Cita Lieta Ltd.

ceanocosmetics.com

51

Ceano Cosmetics, operated by Cita Lieta Ltd., is a Latvian-based manufacturer specializing in wholesale natural handmade cosmetics including soaps, bath bombs, and skin care products. Established in 2005, the company serves an international market with a focus on private label manufacturing and export. The website presents a professional and consistent brand image with multilingual support and clear contact channels. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and reCAPTCHA v3 for form security. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, but lacks some recommended security headers. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the business itself shows trust indicators like ISO certification and EU funding acknowledgments. Overall, the site is credible and functional but would benefit from enhanced security policies and domain registration transparency.

N

Northway klīnika

northwayklinika.lv

49

Northway klīnika is a private healthcare clinic based in Riga, Latvia, specializing in reproductive health and infertility treatment. The clinic offers a comprehensive range of services including infertility diagnostics, genetic testing, gynecology, pregnancy care, urology, donor programs, and innovative procedures like iPRF. The website is professionally designed, multilingual, and targets couples and individuals seeking fertility solutions. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Overall, the site reflects a credible and established healthcare provider with active digital marketing and social media engagement.

W

Wallflora

wallflorashop.com

63

Wallflora is an e-commerce retailer specializing in peel and stick removable wallpapers and related home decor products. Founded in 2015 and operating primarily from Latvia, the company targets consumers interested in easy-to-install, customizable wallpaper solutions. The website is built on the Shopify platform using the Dawn theme, integrating multiple marketing and analytics tools such as Google Analytics, Hotjar, and Klaviyo to enhance customer engagement and track user behavior. Social media presence on Facebook, Instagram, and Pinterest supports brand visibility and customer interaction. The domain is well-established with consistent registration details and domain locking, though DNSSEC is not enabled, representing a minor security gap. Privacy and cookie policies are present and include consent mechanisms, indicating a baseline compliance with GDPR requirements. However, explicit security policies and incident response information are not published, which could be improved to enhance trust and transparency.

L

Latvijas valts ceļi

lvceli.lv

55

Latvijas Valsts ceļi is a Latvian government-owned entity responsible for managing the national road network. The website serves as an official portal providing information on road conditions, construction works, traffic restrictions, and related services. It targets the general public, government stakeholders, and businesses involved in transportation and infrastructure. The organization positions itself as the authoritative source for road management in Latvia, offering services such as permits, traffic data, and maintenance updates. Technically, the website is built on WordPress 6.5.2 with a modern tech stack including jQuery, Bootstrap, and Font Awesome. SEO is enhanced via the Yoast SEO plugin, and the site is mobile-optimized with good navigation and content structure. Performance is moderate, and accessibility features are basic but present. The site uses HTTPS with secure cookie settings, though lacks some advanced security headers. From a security perspective, the site enforces HTTPS and uses secure cookies, but does not expose evident vulnerabilities or sensitive data. However, it lacks explicit security policies, incident response contacts, and security.txt files. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Contact information is comprehensive, including emails, phone numbers, and physical address. Overall, the website presents a professional and trustworthy digital presence for a government transportation authority. The absence of WHOIS data limits full domain legitimacy verification, but the content and external references support its authenticity. Strategic improvements in security headers and incident response transparency would enhance its security posture and trustworthiness.

L

Liepājas apbedīšanas birojs

liepab.lv

56

Liepājas apbedīšanas birojs is a small local funeral service provider based in Liepāja, Latvia, offering comprehensive funeral and cremation services including transportation of the deceased, preparation for funerals, documentation processing, and coordination of ceremonies. The company operates directly without intermediaries and owns its transport, which enhances trust and service reliability. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix technologies and frameworks. The site is mobile optimized and provides relevant content for its target audience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data was available due to query limits, limiting domain registration verification. Overall, the business appears legitimate and professionally presented, but improvements in privacy compliance and security best practices are recommended.

S

SIA KKJGKK

sushibars.lv

39

Sushibars.lv is a Latvian-based sushi delivery service operating primarily in Riga and its surrounding areas. The company offers a variety of sushi products including traditional Asian and modern fusion sushi, with special promotions such as 1+1 deals and free delivery. The business targets local consumers seeking convenient and quality sushi delivery. The website is built on WordPress with WooCommerce, leveraging popular plugins and page builders to provide a user-friendly e-commerce experience. Social media integration with Facebook and Instagram supports marketing efforts. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site presents a professional and trustworthy online presence for a small local food delivery business.

PURPUR RĪGA operates an e-commerce platform specializing in Scandinavian furniture and home decor, targeting consumers in Latvia and surrounding regions. The website offers a catalog of sofas, chairs, tables, beds, and accessories, emphasizing customization with over 500 fabric options. The company positions itself as a niche retailer with a focus on quality and design aesthetics. Technically, the site is built on Shopify using the Impulse theme, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile-optimized and employs HTTPS for secure communications. Security posture is adequate with the use of hCaptcha for form protection and cookie consent mechanisms, though explicit security headers and policies are not fully documented. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site presents a professional and trustworthy front but would benefit from enhanced transparency in privacy and security policies.

L

Latvijas šķirnes zirgu audzētāju asociācija

lszaa.lv

52

The Latvijas šķirnes zirgu audzētāju asociācija (LSZAA) is a Latvian non-profit association dedicated to improving the genetic potential of Latvian horse breeds through effective selection work, sport horse breeding, and preservation of genetic resources. The website serves as an information hub for members and stakeholders, offering news, educational resources, event information, and access to a horse breed database. The association maintains partnerships with various related organizations and governmental bodies, reinforcing its position in the national equine sector. Technically, the website is built on WordPress and employs common JavaScript libraries such as jQuery, Bootstrap, and OwlCarousel for UI components and interactivity. Google Analytics and Facebook SDK are used for visitor tracking and social media integration. The site is mobile-optimized with a moderate performance profile and basic accessibility features. However, it lacks advanced SEO and security headers, which could be improved. From a security perspective, the site uses HTTPS, ensuring encrypted communication. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. No incident response or vulnerability disclosure mechanisms are present, which could hinder timely security issue reporting. Overall, the website is legitimate and professionally maintained, with clear contact information and partner affiliations. The lack of WHOIS data limits domain trust analysis, but the content and structure support a moderate trust level. Strategic improvements in privacy compliance, security headers, and incident response readiness are recommended to enhance the security posture and regulatory adherence of the association's online presence.

P

Your Site Title

prosum.lv

53

The website www.prosum.lv represents a small educational institution in Latvia, focused on early childhood and primary education with a Montessori approach. The site showcases events, school activities, and community engagement, targeting parents and families seeking quality education for their children. The business appears to have been active since 2009, indicating a stable presence in the local education sector. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and hosting infrastructure, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and HSTS enabled, but lacks visible privacy and cookie policies, which impacts compliance and trust. Marketing is supported by Facebook Pixel for user tracking and retargeting. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and clearer contact information to improve trust and regulatory adherence.

C

COINSTORE.LV

coinstore.lv

45

COINSTORE.LV is a small retail e-commerce business specializing in antiques, numismatics, banknotes, and related collectibles. The website offers a local online auction platform and services such as coin grading (NGC) and online antique appraisal. The target audience primarily consists of collectors and antique enthusiasts, with content presented in Russian and options for multiple languages. The business positions itself as a niche marketplace with a focus on unique collectible items and auction services. Technically, the website employs common web technologies including jQuery, Google Analytics, Facebook SDK, and PhotoSwipe for image galleries. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO practices are adequate with proper meta tags and language settings, though no structured data or Open Graph tags were detected. From a security perspective, the site uses HTTPS but lacks visible security headers in the provided data. Cookie consent is implemented, indicating some privacy compliance awareness. However, no explicit contact information, security policies, or incident response details are available, which limits transparency and trust. The WHOIS data could not be retrieved due to query limits, but the domain appears legitimate based on website content and business presence. Overall, COINSTORE.LV presents a professional and functional e-commerce platform for antiques and collectibles with room for improvement in security posture, transparency, and compliance documentation.

Z

Zoo Rezidence

zoorezidence.lv

42

Zoo Rezidence is a Latvian zoo and leisure complex offering family-friendly recreational services and zoo entry. The website is built on WordPress using the Divi theme and NextGEN Gallery plugin, showcasing a gallery of images and providing clear contact details including phone, email, and physical address. The site is bilingual with Latvian as the primary language and English as an option. Technically, the site uses modern web technologies but lacks advanced security headers and privacy policies, which impacts its compliance posture. The absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details. Overall, the site presents a professional and trustworthy front for a small hospitality business but would benefit from enhanced security and privacy compliance measures.

F

Fajans Auction House

fajans.lv

60

Fajans Auction House operates as an online auction platform specializing in antiques, art, and collectible items. The company targets collectors and enthusiasts primarily in Latvia but also serves an international clientele with over 5000 active customers. Their business model revolves around monthly real-time online auctions and an online shop, generating revenue through commissions on sales. The company is registered as SIA "E-Laiks" and maintains a professional online presence with clear contact details and social media engagement. Technically, the website leverages modern web technologies including the Yii PHP framework, Bootstrap, jQuery, and integrates Google services such as Analytics and reCAPTCHA for security and user tracking. Real-time auction updates are supported via WebSocket technology secured with token authentication. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms from abuse. Error tracking is enabled via Sentry. However, some standard security headers like Content-Security-Policy and X-Frame-Options are not visibly set, which could be improved to enhance protection against common web attacks. No evidence of a formal security policy or incident response contact was found. Overall, the website is legitimate and professionally maintained, with good privacy compliance and no signs of malicious or adult content. The lack of WHOIS data limits full domain trust verification, but the business information and website content support a positive trust assessment. Strategic improvements in security headers and incident response transparency would further strengthen their security posture.

A

Augšdaugavas novada pašvaldība

augsdaugavasnovads.lv

58

Augšdaugavas novads is a Latvian municipal government website providing comprehensive information and services to residents, businesses, and visitors. The site offers detailed sections on local governance, public services, events, tourism, and community participation, positioning itself as a key regional information hub. The website is well-branded and consistent with government standards, targeting a broad audience including local citizens and tourists. Technically, the site is built on WordPress with modern web technologies such as jQuery, Google Fonts, and Google Tag Manager. It employs responsive design and accessibility features, ensuring good user experience across devices. The presence of Cloudflare Turnstile captcha enhances form security. SEO and performance optimizations are evident, though hosting provider details are not explicit. Security posture is solid with HTTPS enforced, multiple security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear cookie and privacy policies aligned with GDPR requirements. However, the site lacks a public security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website is a trustworthy and professional government portal with good content quality and technical implementation. The absence of WHOIS data limits full domain trust analysis, but the site content and external links support legitimacy. Strategic improvements in security transparency and incident response communication would further strengthen its security posture.

P

Pērle rada

perlerada.com

61

Pērle rada operates as a small retail e-commerce business specializing in slow fashion products made from natural fibers such as hemp and wool. The website targets consumers interested in sustainable and natural clothing options, positioning itself as a niche brand focused on quality and natural colors. The business infrastructure is built on the Wix platform, leveraging Wix's proprietary frameworks and e-commerce capabilities. The site demonstrates moderate technical maturity with good mobile optimization and basic SEO practices. Security posture is solid with HTTPS enforced and some client-side security hardening, but lacks explicit security headers and formal privacy or incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence suggests legitimate operations. Overall, the site is functional and trustworthy but would benefit from enhanced compliance and transparency measures.