Security Directory

S

SOS Kinderdorpen

soskinderdorpen.nl

76

SOS Kinderdorpen is a well-established non-profit organization based in the Netherlands focused on strengthening families to ensure children grow up in loving and safe environments. The website reflects a professional and consistent brand presence with clear messaging aimed at donors, supporters, and stakeholders interested in child welfare. The organization leverages multiple digital marketing and analytics tools to engage its audience effectively while maintaining GDPR compliance through a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress and integrates modern technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot, ensuring a good level of digital maturity and performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a large non-profit entity.

F

Forma Pro Films

formaprofilms.com

40

Forma Pro Films is an established international film production company founded in 2011, specializing in conceptualizing, producing, and distributing film and television content globally. The company offers a comprehensive range of production services including casting, legal, accounting, payroll, budgeting, scheduling, scouting, and crew hire, with unique regional assets such as an equipped sound stage and in-house professional equipment. The website reflects a professional media company with a solid market position and partnerships with notable industry players like Netflix and Fremantle. Technically, the website is built on WordPress using the Flatsome theme and incorporates modern web technologies such as jQuery and Flickity sliders. The site is mobile optimized and presents a good user experience with multimedia content. However, there is room for improvement in SEO, accessibility, and performance optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data, but lacks important security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating potential gaps in security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

N

NCH Corporation

nch.com

69

NCH Corporation is a well-established global company specializing in industrial water treatment, energy conservation, and maintenance solutions. Founded in 1919, it has a strong family leadership legacy and distributes products to over 50 countries. The website reflects a mature business with a broad product portfolio targeting industrial and institutional customers. Technically, the site is built on ASP.NET WebForms with DNN CMS, using legacy JavaScript libraries and standard SEO and accessibility features. Security posture is good with HTTPS and cookie consent implemented, though security headers and incident response policies are not publicly visible. The absence of WHOIS data for the queried domain limits domain registration trust analysis but does not detract from the overall legitimacy indicated by the website content and social media presence. Strategic recommendations include updating technical components, enhancing security headers, and publishing explicit security policies to improve trust and compliance.

AS Ķekava Foods is a Latvian poultry and meat product manufacturer formed in 2024 by merging several local poultry companies. It operates as part of the AB Akola group, the largest agricultural and food production conglomerate in the Baltics. The company targets both B2B clients and consumers with a focus on high-quality poultry products. The website is built on WordPress, leveraging modern JavaScript libraries and SEO plugins, indicating a moderate level of digital maturity. Privacy and cookie policies are present, reflecting compliance with GDPR requirements. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit incident response information. Overall, the website presents a professional and trustworthy image consistent with a large manufacturing business in Latvia.

خ

خمسات

khamsat.com

71

Khamsat.com is a well-established Arabic online marketplace founded in 2010, specializing in microservices across diverse categories including design, writing, marketing, programming, video production, engineering, business services, audio, remote education, data, and lifestyle. The platform targets Arabic-speaking freelancers and clients, offering a comprehensive and professional service ecosystem. Technically, the site uses a custom CMS with JavaScript and CSS, hosted on AWS infrastructure, and employs proprietary Hsoub JS components for UI elements. The website is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy and cookie policies are present with a forced consent mechanism, indicating GDPR compliance. No direct contact emails or phone numbers are published, and no formal security policy or incident response contacts are found. Overall, Khamsat.com demonstrates a mature digital presence with strong business credibility and user trust, though improvements in security transparency and DNS security are recommended.

N

NVA Online Advertising B.V.

tkb.eu

51

The website tkb.eu is a domain sales landing page operated by NVA Online Advertising B.V., a Dutch company specializing in domain brokerage and escrow services since 2004. The site offers the domain tkb.eu for sale through the Nameshift.com platform, which provides a secure and fast domain transfer process with no fees for buyers. The business model focuses on facilitating domain ownership transfers with escrow protection, targeting domain investors and buyers. The website content is minimal but functional, emphasizing trust signals such as a Trustpilot widget and free transfer services. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, served securely over HTTPS with good performance and mobile optimization. The site uses external CDNs and integrates third-party widgets for reviews and analytics. However, it lacks explicit privacy, cookie, and security policies, which limits its privacy compliance posture. No social media or direct contact emails are provided, but a physical address and domain purchase form are present. From a security perspective, the site enforces HTTPS and uses secure form inputs but does not implement advanced security headers or publish incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns. Overall, the site demonstrates a moderate security posture but would benefit from enhanced privacy and security disclosures. The overall risk is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, adding incident response contact information, implementing security headers, and improving transparency to enhance trust and compliance.

The website hosted at unicreditbank.lv currently serves a generic CentOS placeholder page unrelated to the domain name or any banking business. The content describes CentOS Linux distribution and community resources, indicating the domain is either unused or misconfigured. There is no business-specific content, contact information, or compliance documentation present. Technically, the site lacks HTTPS and security headers, and no modern web technologies or tracking scripts are detected. The WHOIS data could not be retrieved due to query limits, preventing verification of domain ownership or legitimacy. Overall, the site appears inactive or abandoned, with minimal security posture and no privacy compliance measures.

E

Epson Europe

epson.eu

71

Epson Europe operates a comprehensive website serving as a regional hub for Epson's technology products and business solutions across Europe. The site provides detailed navigation for various product verticals including business printers, projectors, scanners, and professional graphics printers, targeting both consumer and enterprise customers. The presence of multiple language and country selectors indicates a focus on localized user experience. Technically, the site employs modern web technologies including Adobe Dynamic Tag Management, Google reCAPTCHA, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and bot protection mechanisms in place, though explicit security headers and incident response information are not evident on this page. Privacy compliance is supported by a cookie consent banner, but no direct privacy policy or terms of service links were found on this page. WHOIS data is unavailable due to EURid privacy restrictions, a common practice for European domains, but the domain and content strongly align with a legitimate enterprise brand. Overall, the website demonstrates good content quality, technical implementation, and business credibility with minor areas for improvement in security transparency and privacy disclosures.

M

Movers.lv

movers.lv

47

Movers.lv is a professional moving and relocation service provider based in Latvia, offering comprehensive services to both private individuals and corporate clients across Latvia and Europe. Their offerings include packing, moving, storage, furniture and retail equipment assembly, and a unique BoxRent plastic box rental service. The company demonstrates a solid market position with numerous client references and partnerships, indicating a well-established business. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Google Analytics, with basic mobile optimization and user experience. Security measures include the use of Google reCAPTCHA on forms, but lack visible security headers and explicit privacy policies, which are areas for improvement. Overall, the website is functional and professional but could enhance its security posture and privacy compliance to increase trustworthiness.

M

Maximus

maximus.com

77

Maximus is a well-established enterprise specializing in providing technology and operational support services primarily to government agencies across federal, state, and local levels. Their offerings include customer experience solutions, technology services such as AI and cybersecurity, health services modernization, and program services that help transform policy into outcomes. The company operates globally with regional subsidiaries and maintains a strong market position as a trusted partner to public sector organizations. Technically, the website is built on Adobe Experience Manager, hosted on AWS infrastructure, and integrates modern analytics and consent management tools such as Google Tag Manager, Crazy Egg, and OneTrust. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Performance is moderate, with room for optimization. From a security perspective, Maximus employs HTTPS with strong domain registration protections and cookie consent mechanisms, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response contact is noted. Overall, the website demonstrates high professionalism, strong business credibility, and good privacy compliance. The risk profile is low, with recommendations to enhance DNS security and publish explicit security policies to further strengthen trust and compliance.

C

Circus Day Nursery

circusdaynursery.co.uk

47

Circus Day Nursery is an independent, family-run early years childcare provider located in Cheltenham, UK. The nursery offers a comprehensive range of childcare services from baby suites to pre-school, including government-funded options and a focus on mindfulness and child development. The business is well-established, recognized with national and local awards, and holds OFSTED certification, positioning it as a trusted provider in the education sector. The website reflects a professional and consistent brand image with detailed service descriptions and policies, targeting parents seeking quality childcare in the region. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS, security headers, and CAPTCHA-protected forms, though some compliance gaps exist such as the absence of a cookie consent banner and published security policies. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and accessibility.

Orkla Latvija is a prominent Latvian food product company managing several beloved local brands such as Laima, Selga, Staburadze, and Ādažu Čipsi. The company emphasizes quality raw materials, brand heritage, and sustainability, operating both manufacturing and retail outlets including the Laima chocolate museum. The website is professionally designed, mobile-optimized, and SEO-friendly, built on WordPress with modern technologies like Vue.js and Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though security headers and explicit incident response information are lacking. WHOIS data was unavailable due to query limits, but the website content and branding strongly indicate a legitimate and established business. Overall, the site reflects a mature digital presence aligned with business goals and compliance requirements.

B

Baltic3D.eu

baltic3d.eu

56

Baltic3D.eu is a specialized industrial 3D printing service provider focusing on high-performance thermoplastics for sectors such as transport and aerospace. The company offers on-demand manufacturing services including rapid prototyping, serial production, and mold making. Their market position is that of a niche provider catering to industrial clients requiring advanced additive manufacturing capabilities. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and third-party analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site demonstrates good design quality and mobile optimization, though accessibility features are basic. Security-wise, the site enforces HTTPS but lacks several important security headers, indicating room for improvement in hardening the web presence. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service pages. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and does not raise immediate concerns. Overall, Baltic3D.eu presents as a legitimate small business with a professional online presence but should enhance its security and compliance posture to better protect users and build trust.

Bajtel.lv is a Latvian-based company established in 2007, specializing in the distribution of sports and lifestyle electronics, including navigation and fitness devices. The company has positioned itself as a leading supplier in the Baltic region, representing major brands and expanding its portfolio over time. The website is built on WordPress using Elementor and related plugins, indicating a modern and maintainable technical infrastructure. The site is accessible, mobile-optimized, and uses HTTPS with good SSL configuration. However, the absence of privacy and cookie policies, lack of visible contact information, and missing WHOIS data reduce overall trust and compliance posture. Security best practices such as security headers are not evident, and no incident response or data protection officer information is provided. Overall, the site presents a professional business presence but requires improvements in transparency, privacy compliance, and security hardening.

V

VILKS Group

multilog.lv

52

VILKS Group is a Latvian-based transportation company specializing in international road freight transport with temperature control, serving multiple European countries. The company offers a range of logistics services including groupage and full cargo transportation, temperature-controlled warehousing, local deliveries, and express freight services. With over 14 years of experience and multiple subsidiaries, VILKS positions itself as a reliable partner in the temperature-controlled logistics sector. The website is professionally designed, mobile-optimized, and provides comprehensive contact information and service descriptions. Technically, the site runs on WordPress with modern tracking and marketing tools integrated, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are found. Overall, the site reflects a credible and professional business with moderate technical maturity and a good security baseline.

eGate Solutions is a technology and software provider specializing in solutions for the airline and railway industries. As a subsidiary of gategroup, it offers end-to-end travel management products designed to optimize operational efficiency and enhance passenger experience. The website presents a professional image with clear navigation and relevant content targeting industry businesses. Technically, the site uses legacy JavaScript libraries such as jQuery 1.10.2 and Modernizr 2.6.1, indicating some technical debt and potential security risks. The site is accessible without WAF or blocking mechanisms, but lacks modern security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, raising concerns about domain legitimacy despite the professional appearance. Overall, the site demonstrates moderate digital maturity but requires improvements in security posture and privacy compliance.

S

SIA Baltic Communication Partners

bcp.lv

55

Reviti, operated by SIA Baltic Communication Partners, is a Latvian communication agency offering a broad spectrum of communication services including strategic communication, corporate communication, campaign planning and execution, media relations, digital communication, and content marketing. The agency targets both B2B and B2C segments across various industries and showcases a portfolio of social and corporate campaigns, indicating a solid market presence in Latvia. The website is professionally designed, mobile responsive, and uses modern web technologies such as WordPress, Bootstrap 5, and jQuery, with integration of Google Maps API for location services. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, although the absence of security headers and privacy/cookie policies indicates room for improvement. Contact information is clearly provided, enhancing business credibility. WHOIS data is unavailable due to query limits, but the domain appears legitimate based on website content and professional presentation. Overall, the site reflects a competent communication agency with moderate risk and good digital maturity.

V

Vass

ecenta.com

76

Vass is a Spain-based technology consulting firm specializing in digital transformation services across a wide range of industries including banking, energy, insurance, retail, telecommunications, education, automotive, life sciences, logistics, travel, manufacturing, and public administration. The company offers a comprehensive portfolio of solutions such as customer experience, marketing, cloud services, business automation, cybersecurity, software engineering, AI and data analytics, and SAP business suite implementations. Their market position is that of a large, established player with a broad industry focus and multiple global technology partnerships. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Google reCAPTCHA, Google Tag Manager, LinkedIn Insight Tag, Facebook Pixel, and OneTrust for cookie consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The hosting is provided by Hosting Concepts B.V., with a domain registered since 2018, consistent with the company's founding year. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent mechanisms are in place, indicating GDPR compliance. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, and no public security policy or incident response contacts are published. There is no vulnerability disclosure or security.txt file found, which could be improved to enhance transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a strong business credibility and technical foundation. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure program to further strengthen security posture and trust.

G

Get & Post LLC

getandpost.com

29

Get & Post LLC operates a small-scale website primarily focused on sharing media content and providing simple utility links such as surveys, calendar alerts, and lost and found boards. The site is minimalistic, under construction, and lacks comprehensive business or security information. The technical infrastructure is basic, relying on jQuery and custom JavaScript with no modern frameworks or CMS detected. The site is hosted via GoDaddy with no HTTPS enabled, which significantly impacts its security posture. There are no privacy or cookie policies, no contact information, and no security headers, indicating a low maturity level in compliance and security practices. Overall, the site appears to be a hobbyist or small local business project with limited digital maturity and security readiness.

C

Columbia Shipmanagement

columbia-shipmanagement.com

59

Columbia Shipmanagement is a well-established maritime services provider with over 40 years of experience, specializing in ship management, crew management, technical services, and commercial operations. The company maintains a strong global presence with multiple subsidiaries offering specialized maritime and related services. Their website reflects a professional and comprehensive digital presence, leveraging modern web technologies and analytics tools to optimize user experience and business operations. The company demonstrates awareness of privacy and compliance requirements through cookie consent mechanisms and a published code of conduct. Security posture is generally good with HTTPS enforced and domain registration consistent with business claims; however, there are opportunities to enhance security by enabling DNSSEC and implementing additional security headers. Overall, Columbia Shipmanagement presents a credible and trustworthy business with a solid technical infrastructure and a good balance of privacy compliance and marketing sophistication.

T

TheMiceCream

themicecream.com

39

TheMiceCream is a specialized travel and event management company focusing on corporate events and unique cultural experiences in the Baltic region. The company leverages over 20 years of industry experience and serves a diverse international clientele. Their website reflects a professional service offering with detailed descriptions and client testimonials, positioning them as a niche regional expert in hospitality and event services. Technically, the website is built on WordPress using common JavaScript libraries like jQuery and Owl Carousel, providing a moderate performance and good mobile responsiveness. However, the absence of WHOIS data raises concerns about domain legitimacy, and the lack of privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

Kāgo is a Latvian small business specializing in the retail and service of quality flooring materials such as parquet, laminate, linoleum, and carpets. The company also offers installation, restoration, and maintenance services, positioning itself as a trusted local provider with over 20 years of experience. The website content is well-structured and provides clear contact information, targeting consumers and businesses seeking flooring solutions in Latvia. Technically, the website uses basic HTML, CSS, and JavaScript with FontAwesome icons but lacks advanced frameworks or CMS. Mobile optimization and accessibility are basic, and no analytics or tracking scripts are detected. Security posture is weak due to the absence of HTTPS verification, security headers, and privacy policies, which poses compliance and trust risks. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to enhance trust and protect user data.

C

Cenuklubs

cenuklubs.lv

61

Cenuklubs.lv is a Latvian retail company operating both physical stores and an online e-commerce platform. The business focuses on household goods, garden and lighting products, and alcoholic beverages, targeting Latvian consumers. The website is built on the Magento 2 platform, leveraging modern JavaScript libraries such as RequireJS, jQuery, and KnockoutJS, indicating a mature digital infrastructure. The site is mobile-optimized and provides a structured navigation experience. Security-wise, the site enforces HTTPS and includes standard security headers, with cookie consent mechanisms in place, reflecting a good security posture. However, explicit security policies and incident response contacts are not found, which could be improved. The absence of WHOIS data limits domain legitimacy assessment, but the website content and structure suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in privacy compliance and business credibility transparency.

B

Barbara Bula Arhitekti

aistudija.lv

44

Barbara Bula Arhitekti is a small architectural and interior design studio based in Latvia, specializing in architecture and interior design projects for commercial and residential clients. The website showcases a comprehensive portfolio of projects, indicating an established presence since 2005. The technical infrastructure is built on GravCMS with Gantry5 framework and UIkit frontend, incorporating modern web technologies and Google Analytics for visitor insights. The site is mobile optimized and provides a cookie consent mechanism aligned with privacy best practices. Security posture is moderate with HTTPS enabled and IP anonymization for analytics, but lacks explicit security headers and detailed privacy policies. Overall, the website presents a professional and trustworthy image but would benefit from enhanced transparency and security documentation.

F

FK Rīgas Futbola Skola

fkrfs.lv

43

FC RFS is a Latvian football club with an official website providing comprehensive information about the club, including news, match schedules, results, ticket sales, and media galleries. The website targets football fans and the Latvian sports community, positioning itself as a prominent participant in the Tonybet Virslīga league. The site demonstrates consistent branding and active engagement through multiple social media channels and sponsorships. Technically, the website is built on WordPress with modern technologies such as jQuery, FontAwesome, and Swiper.js, and is optimized for mobile devices with good SEO practices implemented via the Yoast SEO plugin. Security-wise, the site uses HTTPS with a valid SSL certificate but lacks some recommended security headers and explicit privacy or security policies. No WHOIS data was available due to query limits, but the website content and structured data indicate legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security posture.

S

Sintec UK Limited

sintec.uk.com

54

Sintec UK Limited is a medium-sized international contractor specializing in mechanical and electrical installation services with a global footprint including offices in the UK, USA, and UAE. The company offers a comprehensive suite of services including electrical installation, design, procurement, commissioning, and project management, serving industries such as manufacturing, automotive, retail, and logistics. Their website reflects a professional and consistent brand image with clear business messaging and a portfolio of over 200 completed projects. Technically, the website is built on WordPress with modern web technologies and includes analytics tools like Google Analytics and Yandex Metrika, indicating a mature digital presence. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS registration data for the domain sintec.uk.com is a notable concern, potentially indicating domain registration issues or privacy protection, which slightly impacts the overall trustworthiness assessment. Overall, the website and business appear legitimate and professional, but domain registration verification is recommended to fully confirm legitimacy.

S

SIA Finance 360

finance360.eu

38

SIA Finance 360 operates as a Latvian financial services company offering integrated financial solutions aimed at clients and partners seeking comprehensive financial support. The company emphasizes fast, secure, and risk-mitigated services with fair pricing and collaboration among market participants. The website content is primarily in Latvian and presents basic corporate information including the company registration number, but lacks detailed privacy, cookie, or terms of service policies. Technically, the website uses older JavaScript libraries such as jQuery 1.9.1 and minimal modern web technologies, with no detected CMS or advanced frameworks. Security posture is moderate but could be improved by updating libraries and implementing security headers. No analytics or tracking tools are evident, indicating minimal user tracking. Overall, the site presents a basic but functional online presence with moderate trustworthiness.

S

Spaceship.com

bbit.com

55

The website bbit.com is a domain parking and sales page operated through Spaceship.com, a domain marketplace platform. The site offers the domain for sale at a premium price and provides multiple payment options. The business model is focused on domain resale targeting domain investors and buyers. The website content is minimal and primarily transactional, with no detailed business or legal information provided. Technically, the site uses standard HTML, CSS, and JavaScript served via Spaceship's CDN, with moderate performance and basic mobile optimization. Security posture is limited, with no detected security headers or privacy policies, and the domain is very recently registered, consistent with a domain resale strategy. Overall, the site is functional for its purpose but lacks comprehensive compliance and security features.

W

Widen legal

readvokati.lv

71

Widen legal is a professional legal services firm established in 2023, operating primarily in the Baltic region with offices in Estonia, Latvia, and Lithuania. The firm offers a broad range of legal services including dispute resolution, real estate, insolvency, public procurement, employment law, corporate and M&A, data protection, tax law, and criminal law. Their market position is that of a regional legal expert with a client-friendly and efficient approach. The website is well-designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence for a relatively new firm. Technically, the site is built on WordPress, leveraging modern plugins such as Forminator for forms, TranslatePress for multilingual support, and Google Tag Manager for analytics and marketing. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. Security posture is strong with HTTPS enforced, reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. Overall, the site demonstrates a high level of professionalism and trustworthiness, with comprehensive team profiles and contact information. Recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure information to further enhance trust and compliance.

V

Voka SIA

voka.lv

60

Voka SIA is a Latvian manufacturing company specializing in grain pre-processing complexes, metal constructions, and agricultural machinery sales. The company positions itself as a leader in its sector, targeting agricultural and industrial clients primarily within Latvia. Their website reflects a professional business with a clear portfolio of projects and services, supported by active social media channels and transparent contact information. Technically, the website is built on WordPress with WooCommerce, integrating modern tracking and marketing tools such as Google Analytics and Facebook Pixel, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers and policies are missing. Overall, the site is well-structured, user-friendly, and trustworthy, though WHOIS data was unavailable due to query limits, limiting domain registration verification.

L

LNO, Inc.

lno-inc.com

52

LNO, Inc. is a Service-Disabled Veteran-Owned Small Business and Native American-Owned company specializing in advanced technology solutions and services primarily for federal government and commercial customers. Their offerings include C4IS, IT, cybersecurity, systems engineering, logistics, and project management. The company has a solid market position as a trusted government contractor with partnerships with major defense and technology firms. The website is built on WordPress with Elementor, hosted on SiteGround, and demonstrates good technical maturity with modern technologies and responsive design. Security posture is adequate with HTTPS enforced and safe link practices, but lacks some advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, reflecting the company's credibility and business focus.

Amitours Group operates as a prominent transportation and tour service provider across major European cities and airports, specializing in airport transfers, bus rentals, ski transfers, and tour operations. The company emphasizes quality service with its own fleet and English-speaking drivers, serving a large customer base since 2007. The website reflects a professional and user-friendly digital presence with clear navigation and mobile optimization. Technically, the site leverages modern frameworks such as Yii and Bootstrap, integrates multiple analytics and tracking tools, and enforces HTTPS with CSRF protections and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and professional website content. Security practices are generally good but could be enhanced by adding more comprehensive security headers and explicit security policies. Privacy compliance is addressed with GDPR indicators and cookie consent, though contact information is limited to email only. Overall, the site presents a moderate risk profile with recommendations to improve transparency and security posture.

Freedom Solutions LLC operates a WordPress-based website focused on providing information, bonuses, and promotional content related to online slot games, primarily targeting Indonesian-speaking users interested in online gambling. The site features multiple articles discussing trusted gambling websites and deposit methods, indicating a niche content publishing business model centered on online gambling information. The domain is long-established, created in 2004, and registered via GoDaddy without privacy protection, which supports legitimacy but lacks detailed registrant transparency. Technically, the website uses WordPress 6.8.1 with jQuery and Bootstrap frameworks, hosted behind Cloudflare DNS. The site is served over HTTPS with a valid SSL certificate but lacks DNSSEC and important security headers, which reduces its security posture. The site’s performance and mobile optimization are basic, with minimal SEO and accessibility features. No advanced analytics, advertising networks, or tracking pixels were detected, indicating minimal user tracking. From a security perspective, the site has a moderate security posture due to HTTPS but lacks privacy policies, cookie consent mechanisms, and incident response contacts. No contact emails, phone numbers, or physical addresses are provided, limiting business credibility and compliance with privacy regulations such as GDPR. The absence of security headers and DNSSEC further weakens the security stance. Overall, the site is functional but basic, with significant room for improvement in privacy, security, and business transparency. The overall risk assessment suggests moderate risk due to limited compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding contact and incident response information, enabling DNSSEC and security headers, and improving content quality and site professionalism to enhance trust and compliance.

I

Igloo Software

igloosoftware.com

66

Igloo Software operates as a digital workplace platform provider specializing in intranet solutions that unify frontline and desked teams to enhance employee engagement. The company positions itself as a modern alternative to traditional intranet software, targeting businesses seeking to improve internal communication and collaboration. The website reflects a medium-sized technology company with a professional online presence and consistent branding. Technically, the site is built on WordPress using Elementor and integrates SEO and marketing tools such as Yoast SEO, Google Tag Manager, Visual Website Optimizer, and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, the website uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers and explicit security or privacy policies. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the active website and social media presence support its credibility. Overall, the site is functional and professional but would benefit from enhanced transparency in privacy, security policies, and contact information.

N

NESS

sales.lv

67

NESS is a Latvian communications agency specializing in providing multichannel communication solutions and marketing automation services to businesses of various sizes. With over 16 years of experience and a client base exceeding 500 companies, NESS offers services including SMS, email, WhatsApp, and other messaging platform integrations, alongside GDPR compliance and customer engagement tools. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Sendinblue. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site implements HTTPS with a valid SSL certificate and includes cookie consent mechanisms, indicating compliance with privacy regulations. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and domain transfer protection. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and readiness. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, NESS presents a credible and professional business with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and DNSSEC implementation would further strengthen its security posture.

D

DECTA

decta.com

75

DECTA operates as a full-stack payment platform specializing in B2B payment solutions tailored for merchants, fintechs, and banks. The company offers a broad range of services including payment acquiring, issuer and acquirer processing, digital banking platforms, and BIN sponsorship. Their market position is strengthened by multiple certifications such as EMI licenses in the UK, Cyprus, and Ireland, PCI DSS Level 1 compliance, and membership with Mastercard and Visa. The website reflects a professional and modern fintech company with a clear focus on innovation and global scalability. Technically, the website employs a modern technology stack with integrations of Google Tag Manager, Google Analytics, Microsoft Clarity, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Osano for consent management. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were identified in the HTML content. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data source limitations, which slightly reduces trustworthiness. Overall, DECTA presents as a credible fintech business with strong compliance and certification signals, a professional web presence, and moderate security posture. The main risk lies in the lack of publicly available domain registration data, which should be further investigated. Strategic recommendations include enhancing transparency around security policies, incident response, and domain registration details to improve trust and compliance.

M

MacLachlan & Donaldson

maclachlan.ie

51

MacLachlan & Donaldson is a well-established intellectual property law firm based in Ireland with over 50 years of experience. The firm offers comprehensive IP services including patents, trade marks, designs, and commercialisation, serving clients across Ireland, the UK, the EU, and globally. Their market position is strong, recognized among the top EU firms for trade mark filings, supported by a professional and content-rich website. Technically, the website is built on WordPress with modern plugins and frameworks, delivering good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the website reflects a credible and trustworthy business with clear contact channels and compliance with privacy regulations.

Gamelab is an academic web application designed for conducting online game theory experiments, primarily targeting researchers and experimenters in the field of economics and social sciences. The platform supports two-player normal-form games with features such as lottery incentives and Mechanical Turk integration. The project is open source and encourages academic citation, positioning itself as a niche tool within the academic research community. The business entity behind the site is SIA k-Consulting, based in Germany, with the domain registered since 2015, reflecting a mature and stable project. Technically, the website employs a straightforward stack including HTML5, CSS3, Font Awesome, Google Fonts, and a C-based web framework (kcgi) hosted on OpenBSD. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No CMS or advanced hosting provider details are evident. External dependencies are limited to trusted sources such as GitHub and Google Fonts. From a security perspective, the site lacks several modern security best practices. There are no detected security headers, DNSSEC is not enabled, and no privacy or cookie policies are present, which impacts compliance with GDPR and other regulations. The domain registration is consistent and legitimate, but the absence of incident response or vulnerability disclosure information suggests room for improvement in security maturity. Overall, the website is functional, professionally presented, and trustworthy within its academic niche but would benefit from enhanced security measures, privacy compliance, and clearer business contact information to improve trust and regulatory adherence.

A

A/S Balticovo

balticovo.lv

46

Balticovo is a well-established Latvian company specializing in egg and egg product manufacturing, holding a leading market position in Northern Europe. Their website reflects a mature business with a clear product portfolio targeting both retail and wholesale customers, including the HoReCa sector. The digital infrastructure is built on OctoberCMS with modern JavaScript libraries, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification, but the website content and business information strongly indicate legitimacy. Overall, Balticovo demonstrates a professional online presence aligned with its market stature.

N

Northern Marine Manning Services

nmms.co.uk

63

Northern Marine Manning Services is a specialized crewing services provider operating within the marine and offshore industries. As part of the Northern Marine Group, it offers a range of services including crewing, marine and offshore training, travel management, marine projects and ship agency, marine engineering, and offshore catering. The company targets marine and offshore industry clients requiring experienced personnel and support services. The website reflects a medium-sized enterprise based in the United Kingdom with a consistent brand presence and multiple subsidiary and partner companies linked.

C

Core Deep Solutions

bctg.lv

45

The website bctg.lv is a login portal branded as 'FRIGATE by Core Deep Solutions'. It appears to serve as an access point for users of a software product or service named FRIGATE. The public-facing content is minimal, with no descriptive business information, contact details, or policies visible. The technical infrastructure relies on older JavaScript libraries such as jQuery 1.9.1 and Bootstrap, indicating moderate digital maturity but some technical debt. The site is mobile responsive and uses HTTPS, but lacks visible security headers and advanced security controls such as multi-factor authentication or CAPTCHA. No WHOIS data was retrievable due to query limits, limiting domain legitimacy verification. Overall, the site presents a basic, functional interface with limited transparency or trust signals.

V

Vincit Union

vincitunion.com

53

Vincit Union is a small accounting service provider based in Riga, Latvia, focusing on delivering professional accounting services to local businesses and individuals. The website presents a clear business focus with contact phone number and social media presence on Facebook and LinkedIn, indicating active engagement with clients. The site uses WordPress CMS with modern SEO and marketing tools such as Yoast SEO, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. Technically, the site is well-structured, mobile-optimized, and uses HTTPS for secure communication. However, the absence of WHOIS data raises concerns about domain registration legitimacy, and the lack of a privacy policy and security headers indicates room for improvement in compliance and security posture. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

A

Altea Federation

alteafederation.it

57

Altea Federation is a medium-sized Italian technology consulting firm specializing in system integration, digital innovation, and business model disruption. With over 30 years of experience, the company collaborates with global technology leaders to enable digital transformation for enterprises. The website reflects a professional and consistent brand presence focused on business clients seeking advanced technology integration services. Technically, the site is built on WordPress using the Avada theme and several plugins such as Ninja Forms and Slider Revolution, with modern JavaScript libraries and cookie consent tools implemented. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security headers and policies are not visible. Privacy compliance is partial, with cookie consent mechanisms present but no clear privacy policy or terms of service found. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

V

VOLBURG Ltd.

volburg.lv

58

VOLBURG Ltd. is a well-established Electronics Manufacturing Services (EMS) provider based in Latvia, specializing in PCB assembly and modules since 1996. The company targets industrial, automotive, and energy-saving sectors, exporting primarily to demanding European markets such as Germany, UK, and Scandinavia. Their service portfolio includes prototyping, development, production, supply chain management, and advanced traceability solutions. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Google Maps API, and various analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security measures include HTTPS, reCAPTCHA on forms, and a cookie consent banner, but lack explicit security headers and published security policies. The security posture is moderate with no critical vulnerabilities detected in the visible content. However, the absence of a privacy policy, terms of service, and incident response information represents compliance and transparency gaps. WHOIS data could not be retrieved due to query limits, limiting domain registration trust verification. Overall, the website and business appear credible and professional, but improvements in privacy and security transparency are recommended.

W

Webnorth

standoutweb.dk

66

Webnorth is a specialized digital agency based in Copenhagen with over 14 years of experience in custom WordPress and WooCommerce development. They position themselves as a technical partner for agencies and businesses, offering tailored web solutions, hosting, and service agreements. Their market position is strong within the niche of WordPress development, emphasizing performance, scalability, and security. The website is professionally designed, multilingual (Danish and English), and optimized for SEO and mobile use. Technically, the site leverages WordPress CMS with integrations including Google Analytics, Matomo, Hotjar, Google Tag Manager, and Cloudflare DNS services. The infrastructure supports fast performance and good accessibility. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism aligned with GDPR and Google Consent Mode. Security posture is solid with HTTPS enforced, security headers present, and domain registration consistent with business claims. No critical vulnerabilities or exposed sensitive data were detected. However, DNSSEC is not enabled, and no explicit security or incident response policies are published, which could be improved. Overall, Webnorth presents a trustworthy and professional digital presence with strong technical and privacy compliance foundations. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing transparency around incident response and data protection officer contacts.

U

UAB Sellfy

sellfy.com

69

Sellfy is a Lithuania-based e-commerce SaaS platform founded in 2010, specializing in providing creators and small businesses with an easy-to-use online store solution. The platform supports selling digital downloads, physical products, print-on-demand merchandise, and subscriptions, positioning itself as an all-in-one creator platform with integrated marketing and growth tools. The website demonstrates a professional and consistent brand presence, with clear messaging targeting creators who want a simple yet powerful e-commerce solution. Technically, the site is built on Webflow with modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance, hosted with Cloudflare DNS and Webflow hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms implemented. Overall, the website is trustworthy, well-designed, and functionally rich, supporting Sellfy's market position as a competitive e-commerce platform for creators.

The website geesinknorba.com currently serves as a placeholder domain reserved by a client of ComSi, with no active business content or services presented. The site contains minimal HTML and CSS, displaying only a message that the domain is reserved. There is no contact information, privacy policy, cookie policy, or terms of service available, indicating a very low level of digital maturity and no active engagement with visitors. The domain itself is well-established, created in 2000, and registered through a reputable registrar with Cloudflare DNS, but the website presence does not reflect an active business operation. From a technical perspective, the site uses basic HTML5 and CSS3 with Google Fonts and Cloudflare DNS services. There is no evidence of CMS, analytics, advertising, or tracking technologies. The site is mobile responsive at a basic level but lacks accessibility and SEO optimization. Security posture is minimal with no visible security headers or HTTPS status provided, and DNSSEC is not enabled, which could be improved to enhance domain security. Security evaluation reveals no immediate vulnerabilities or exposed sensitive data, but the absence of security policies, contact information for incident response, and privacy compliance measures represent significant gaps. The lack of HTTPS or security headers would be a critical issue if confirmed, but data is insufficient to confirm HTTPS status. Overall, the site poses low risk due to its placeholder nature but lacks trust and credibility for business or customer engagement. Strategic recommendations include enabling DNSSEC, implementing HTTPS with strong SSL/TLS, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance. These steps would prepare the domain for future active use and reduce potential security risks.

U

Utkilen AS

utkilen.no

53

Utkilen AS is a well-established Norwegian shipping company specializing in the transportation of chemical tankers and bulk liquid cargoes. With a history dating back to 1916 and formal founding in 1967, the company operates a fleet of 15 vessels and maintains a significant market position in Northern Europe and global trade under its Stream brand. The website reflects a professional and consistent brand image, targeting industry clients and partners in the shipping and chemical transport sectors. Technically, the site is built on WordPress with modern plugins and frameworks, offering good SEO and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. Overall, the site demonstrates good business credibility and privacy compliance, with room for improvement in security transparency and accessibility.

V

Veset

veset.tv

70

Veset is a technology company specializing in cloud-native SaaS solutions for linear television channel management and playout. Their flagship platform, Veset Nimbus, enables media organizations, broadcasters, and content owners to manage and distribute premium linear channels efficiently across OTT and traditional broadcast platforms. The company positions itself as a pioneer in cloud playout technology, offering flexible, scalable, and integrated solutions tailored to various industry needs. Their client base includes notable media and technology partners, underscoring their market presence and credibility. Technically, Veset employs a modern web infrastructure built on Webflow CMS, leveraging cloud services such as AWS and security tools like Google reCAPTCHA and Cloudflare Turnstile. Their platform architecture is based on microservices and Kubernetes clusters, ensuring high availability and scalability. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital presence. From a security perspective, Veset maintains a strong posture with HTTPS enforcement, ISO 27001 certification, secure forms with CAPTCHA, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. However, explicit incident response and vulnerability disclosure policies are not publicly available. Overall, Veset presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around incident response, publishing a security.txt file, and providing direct contact emails or phone numbers for security and support inquiries to further strengthen trust and compliance.