Security Directory

M

mammamuntetiem.lv

mammamuntetiem.lv

48

Mammamuntetiem.lv is a Latvian digital media portal dedicated to family-related content, including parenting, health, lifestyle, and recipes. The site targets families, especially mothers and fathers, providing relevant news, advice, and interactive tools such as pregnancy and child development calendars. It holds a solid market position within the Latvian media landscape as a trusted source for family-oriented information. Technically, the website employs modern web technologies including Google Tag Manager, Google Adsense, and Gemius analytics, hosted likely on DigitalOcean infrastructure. The site is mobile-optimized and features good SEO practices with structured data and meta tags. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and integrates a consent management platform, though explicit security policies and incident response information are not publicly available. Overall, the website presents a professional and trustworthy digital presence with moderate tracking and advertising integrations. The lack of WHOIS data limits domain legitimacy assessment, but the content and technical indicators suggest a legitimate operation.

J

Jaunākās ziņas | Jauns.lv

jauns.lv

57

Jauns.lv is a prominent Latvian online news portal delivering the latest news across various categories including sports, business, entertainment, health, and recipes. The site targets Latvian-speaking audiences and offers additional content such as video via its subsidiary domain jauns.tv. The platform is well-positioned in the Latvian media market, leveraging modern web technologies to provide a responsive and user-friendly experience. Advertising and tracking are integrated through major networks, supporting its business model primarily based on ad revenue. However, explicit privacy and terms of service documentation are not readily found, which may impact compliance perceptions. Technically, the website employs Vue.js and Nuxt.js frameworks with Tailwind CSS for styling, indicating a modern and maintainable tech stack. Performance and mobile optimization are good, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but additional security headers and explicit security policies would strengthen the overall security framework. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the website's content quality, branding consistency, and technical indicators suggest a trustworthy and established media entity. Privacy compliance is basic, with GDPR consent mechanisms in place but lacking comprehensive policy disclosures. Overall, Jauns.lv presents as a professional and credible news platform with room for improvement in privacy transparency and security best practices.

A

Ad Box SIA

adbox.lv

54

Ad Box SIA operates the website adbox.lv, a digital sales house specializing in internet advertising in Latvia since 2014. The company provides a technological platform for publishers and advertisers to manage and serve various ad formats including standard banners, rich media, video, and mobile ads. Positioned as a reliable and growing player in the Latvian digital advertising market, Adbox emphasizes strong partnerships, technological capabilities, and transparent billing. The website content is professional and clearly targeted at digital advertising stakeholders, with comprehensive service descriptions and contact information. Technically, the website is built on WordPress CMS using common plugins such as Contact Form 7 and qTranslate-XT for multilingual support. It employs modern JavaScript libraries including jQuery and Highcharts, and integrates Google Tag Manager for analytics. The site is served over HTTPS with a cookie consent mechanism implemented, indicating a baseline level of privacy compliance. Performance and mobile optimization are moderate to good, though accessibility features could be improved. From a security perspective, the site uses HTTPS but lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data due to query limits restricts domain legitimacy verification, but the website content and business information appear consistent and trustworthy. Privacy and cookie policies are present, supporting GDPR compliance. Overall, the website presents a professional and credible digital advertising business with a solid technical foundation and basic privacy compliance. Enhancements in security headers, accessibility, and explicit security policies would strengthen its security posture and trustworthiness.

D

Digital Matter

dimatter.ai

67

Digital Matter is a Lithuania-based advertising technology and digital marketing company founded in 2021. It serves publishers, advertisers, and online businesses by providing data-driven monetization, premium ad solutions, and expert SEO services. The company holds reputable certifications such as Google Certified Publishing Partner and IAB Baltics membership, positioning itself as a trusted regional player with a solid client base of over 200 publishers and 350 advertisers. Their product suite includes advanced tools like data management platforms, content recommendation engines, and premium ad servers, supporting a comprehensive business model focused on maximizing ad revenue and audience engagement. Technically, the website demonstrates a mature digital infrastructure leveraging modern technologies including Google Tag Manager, Facebook Pixel, Hotjar, and Cxense for analytics and marketing. The site is hosted on Cloudflare, ensuring fast performance and robust SSL encryption. The presence of a Content-Security-Policy header and cookie consent mechanisms reflects a good security and privacy posture, although DNSSEC is not enabled, representing a minor security improvement opportunity. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and preparedness. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, Digital Matter presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and implementing a vulnerability disclosure framework to further strengthen security posture and stakeholder trust.

G

Graftik Digital Design Studio

graftik.lv

51

Graftik Digital Design Studio is a professional digital design agency based in Riga, Latvia, specializing in branding, web development, and multimedia solutions. The company targets brands and organizations seeking tailored digital design services and has established a strong market position with notable clients such as Luminor and Apple. Their website reflects a high level of professionalism with comprehensive case studies and a consistent brand identity. Technically, the website employs modern JavaScript libraries including jQuery and GSAP for animations, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, demonstrating digital maturity and GDPR compliance awareness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and incident response transparency are recommended. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS data due to query limits restricts full domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining compliance documentation to strengthen trust and security posture.

K

Kulturní dům města Holic

kdholice.cz

59

Kulturní dům města Holic is a cultural center serving the Holice region in the Czech Republic, offering a wide range of cultural events including concerts, theater performances, exhibitions, and cinema screenings. The organization also provides community services such as costume rental and operates a museum and gallery, positioning itself as a key cultural hub for local residents and visitors. The website reflects a professional and community-oriented business model focused on cultural enrichment and engagement across all age groups. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, Google Tag Manager, and CAPTCHA services to ensure performance, security, and user experience. The site is mobile optimized, fast loading, and includes SEO best practices, demonstrating a mature digital infrastructure suitable for its audience and business needs. From a security perspective, the site enforces HTTPS, integrates CAPTCHA on forms to prevent abuse, and provides a cookie consent mechanism compliant with GDPR. However, it lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious activities were detected, indicating a solid security posture for a small cultural institution. Overall, the website is trustworthy, well-maintained, and aligned with its business purpose. The absence of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the organization. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

E

eD group

ed.cz

61

eD group is a large technology holding operating primarily in Central Europe, focusing on IT distribution, software solutions, digital marketing, and e-commerce. The group comprises several subsidiaries specializing in various IT and technology sectors, serving a broad B2B audience. Their market position is strong, with partnerships with major global brands and a comprehensive portfolio of services. The website reflects a mature digital presence with modern technologies and good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies could be improved. The absence of WHOIS data limits domain trust assessment but the professional presentation and detailed business information support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a security.txt file.

G

Gransy s.r.o.

coolcatalogue.eu

44

The website coolcatalogue.eu is operated by Gransy s.r.o., a Czech company, and serves as a multilingual platform for accessing and promoting various catalogues primarily targeting European audiences. The site offers language options for Czech, German, English, French, Hungarian, Italian, Dutch, Polish, and Slovak, indicating a broad regional focus. The business model centers on online catalogue distribution and promotion, positioning itself as a niche player in this space. Technically, the website employs Google Tag Manager and Google Analytics for tracking and analytics purposes. The site is basic in design and functionality, with minimal styling and navigation elements. There is no detected CMS or advanced frameworks, and the site performance is moderate. Mobile optimization and accessibility are basic, with no advanced SEO or accessibility features observed. From a security perspective, the site lacks critical security headers and does not display privacy or cookie policies, which are important for GDPR compliance given the European target audience. No contact information or incident response details are provided, limiting transparency and user trust. The WHOIS data is consistent and transparent, with the registrant matching the website's regional focus and business type, supporting legitimacy. Overall, the website is functional but basic, with significant room for improvement in privacy compliance, security posture, and user engagement features. The absence of privacy and cookie policies and contact information are notable gaps. Strategic recommendations include implementing HTTPS with strong SSL, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to enhance trust and compliance.

I

Inovcorp

workky.com

65

Workky is a Portuguese web-based platform developed by Inovcorp, focused on simplifying internal business process management through modular solutions tailored for various executive roles. The platform integrates with multiple ERP systems and includes compliance features such as a whistleblowing portal, positioning itself as a comprehensive B2B SaaS solution for medium-sized businesses. The website demonstrates good digital maturity with modern technologies including jQuery, Google Tag Manager, and Crisp chat, and shows good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS domain registration data is a notable concern, impacting domain legitimacy and trustworthiness. Overall, the platform appears professional and trustworthy from a business and technical perspective but would benefit from improved transparency in domain registration and enhanced security disclosures.

A

Asgard Sp. z o.o.

bluecollection.gifts

67

Asgard Sp. z o.o., operating the website bluecollection.gifts, is a medium-sized Polish company specializing in supplying promotional gadgets and corporate gifts with custom printing services. The company offers a wide range of products and marking techniques, targeting B2B customers seeking branding and promotional solutions. The website is built on a modern Magento platform with the ScandiPWA frontend, integrating advanced monitoring and marketing tools such as New Relic, Smartsupp live chat, and Google Tag Manager. The digital infrastructure supports good performance and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforcement and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing trust. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stability.

W

WaliChat

wali.chat

51

WaliChat is a technology company specializing in providing a multi-agent live chat platform for WhatsApp, targeting businesses and teams that require efficient customer communication and collaboration. Their platform includes advanced features such as AI-powered chatbots, no-code automation workflows, team permissions, analytics, and a mobile app, positioning them as a comprehensive solution in the WhatsApp business communication market. The company operates on a SaaS subscription model with tiered pricing plans catering to different business sizes and needs. Technically, the website is built using modern web technologies including Bootstrap, FontAwesome, and various JavaScript libraries for UI components and analytics. Hosting appears to be managed via Google Cloud DNS services. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with rich content including videos, screenshots, and detailed feature descriptions. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and no explicit privacy or cookie policies are published, which are gaps in compliance and security best practices. No WAF or blocking mechanisms were detected, and no sensitive data exposure was found in the HTML content. Overall, WaliChat presents a mature and professional online presence with strong business credibility and technical implementation. The main risks relate to privacy compliance and DNS security enhancements. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, and adding security incident response disclosures to improve trust and compliance.

R

Ratos

ratos.com

64

Ratos is a Nordic investment group focusing on developing mid-sized companies in technological and infrastructure sectors. The company operates a decentralized governance model that fosters synergies among its subsidiaries, creating value for shareholders and society. The website presents comprehensive business information, press releases, and investor relations content, targeting investors and business stakeholders. Technically, the site uses modern analytics tools including Google Analytics, Google Tag Manager, and Microsoft Azure Application Insights, hosted likely on Microsoft Azure infrastructure. The website is well-designed, mobile-optimized, and provides clear navigation and professional content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and explicit security or incident response policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is professional and trustworthy in content but would benefit from improved transparency in domain registration and enhanced security disclosures.

F

Forkliftonline Latvija

forkliftonline.lv

58

Forkliftonline Latvija operates as a specialized online platform focused on the trading of forklifts, warehouse machinery, and spare parts. With a market presence spanning over two decades, it serves a broad audience of businesses and individuals in Latvia and internationally through multiple localized domains. The platform offers extensive categorized listings, dealer registrations, and rental services, positioning itself as a key player in the industrial equipment marketplace. Technically, the website employs modern JavaScript frameworks, integrates major analytics and advertising tools, and maintains a professional design with good mobile optimization. Security posture is solid with HTTPS enforcement and basic security headers, though there is room for improvement in security policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with strong business credibility but lacks publicly available WHOIS data and some advanced security disclosures.

A

Agroline Latvija

agroline.lv

58

Agroline Latvija operates a specialized online marketplace focused on agricultural machinery, spare parts, and related products. With over two decades of market presence and millions of monthly users, it serves farmers, agricultural businesses, and equipment dealers primarily in Latvia and internationally through multiple localized domains. The platform offers extensive listings, dealer registration, and advertising services, positioning itself as a trusted intermediary in the agricultural equipment sector. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and a professional design, though accessibility features are basic. Security is enforced with HTTPS and some security headers, but there is room for improvement in header coverage and privacy consent mechanisms. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent banner and security policy pages indicates partial GDPR compliance. WHOIS data could not be retrieved due to query limits, limiting domain registration trust verification. The site demonstrates strong business credibility through customer reviews, social media presence, and a Google partner badge. Overall, Agroline.lv is a reputable and functional platform with a good balance of business maturity and technical implementation. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and regulatory adherence.

A

Autoline Latvija

autoline.lv

59

Autoline Latvija operates as a leading online platform specializing in the sale and purchase of commercial vehicles and spare parts, serving a broad international audience with over 200,000 daily users. The platform offers extensive listings across multiple vehicle categories and supports sellers with marketing and promotional services. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for tracking and marketing, with a responsive design optimized for mobile users. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements in security headers and privacy compliance mechanisms are recommended. The absence of WHOIS data limits full domain legitimacy verification, but the site's professional presentation and extensive business information support its credibility. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing explicit security and incident response policies, and improving security headers to strengthen defense-in-depth.

Z

Zalando SE

zalando.de

47

Zalando SE operates a leading European online fashion retail platform offering a wide range of shoes, clothing, accessories, and beauty products from over 1,900 brands. The website targets consumers interested in fashion and lifestyle products, providing free delivery and returns to enhance customer experience. The company is well-established with a domain age consistent with its founding year of 2008 and operates multiple regional sister sites. Technically, the website employs modern JavaScript frameworks such as React and RequireJS, hosted on Amazon AWS infrastructure, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and consent management via Usercentrics, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable e-commerce platform.

L

Fotos, Fotobücher, Wandbilder, Fotogeschenke & mehr online

limango-fotos.de

67

The website limango-fotos.de is a German e-commerce platform specializing in photo products such as photo prints, photo books, wall pictures, and photo gifts. It positions itself as a provider of affordable, high-quality photo products with fast delivery and easy ordering. The target audience is general consumers interested in personalized photo products. The business operates in the e-commerce sector with a medium-sized footprint and consistent branding. The website uses modern web technologies including PrimeFaces JSF components, jQuery, Google Tag Manager, and Visual Website Optimizer for analytics and optimization. Consent management is implemented via Cookiefirst, indicating attention to privacy compliance. Security posture is good with HTTPS enforced and secure cookie settings, though the absence of explicit security headers and published security policies suggests room for improvement. No contact information or privacy policy pages were detected, which impacts privacy compliance and business credibility scores. Overall, the website is professionally designed, mobile-optimized, and safe for general audiences, but could enhance trust by publishing comprehensive privacy and security information.

Q

Q-nomy

qnomy.com

67

Q-nomy is an established enterprise software company specializing in appointment scheduling and queue management solutions tailored for sectors such as healthcare, government, banking, retail, telecom, and education. With over 20 years of experience, the company offers both SaaS and on-premise platforms, integrating with numerous enterprise tools to streamline customer journeys. Their market position is strong, supported by a broad client base and strategic partnerships, notably with Amdocs. Technically, the website is built on a modern stack using Webflow CMS, Google Analytics 4, Microsoft Clarity, Hotjar, and other advanced tools, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, CAPTCHA protections, and privacy compliance, though explicit security policies and incident response pages are absent. WHOIS data is unavailable, which slightly impacts transparency but the overall business credibility remains high due to visible trust signals and professional presentation.

T

Tilde.ai

tilde.lv

63

Tilde.ai is a European leader in AI-powered language technologies, offering a broad range of services including neural machine translation, speech-to-text, text-to-speech, chatbots, and enterprise assistants. The company targets businesses and organizations requiring advanced language solutions, positioning itself strongly in the technology sector with a medium-sized business profile founded in 2017. The website is built on WordPress with modern plugins and technologies, hosted likely on Microsoft Azure, and demonstrates good digital maturity with SEO and mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks some security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no clear privacy policy visible. Overall, the site is professional and trustworthy, though improvements in transparency and security documentation are recommended.

B

Brentex OÜ

brentex.lv

41

Brentex OÜ is an established Estonian manufacturer specializing in welded frame trailers and related accessories, serving the Baltic and Scandinavian markets since 2000. The company emphasizes durable construction and moderate pricing, holding EU type approval under Directive 2007/46/EC. Their website targets consumers and businesses seeking reliable trailers, offering detailed product information and multiple retail locations across Latvia. Technically, the website employs modern tracking tools such as Google Tag Manager and Facebook Pixel, and integrates interactive maps via Leaflet.js, reflecting a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies and lack of security headers indicate areas for improvement in compliance and security posture. The WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website presents a professional and trustworthy front with room to enhance security and privacy transparency.

L

Lux Express

luxexpress.eu

60

Lux Express is a prominent transportation company operating primarily in the Baltic region and neighboring countries, offering intercity and international bus travel services. The company targets general travelers seeking comfortable and reliable bus transportation, supported by a modern digital presence with multilingual support. Their website reflects a strong market position with key services including ticket sales, corporate programs, and charter services. Technically, the site is built on modern frameworks such as React and Next.js, hosted on DigitalOcean infrastructure, and integrates marketing and analytics tools like Google Tag Manager and Exponea. Security posture is robust with HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website is professional, trustworthy, and provides a positive user experience with good performance and mobile optimization.

D

D-EDGE

d-edge.com

63

D-EDGE is a leading hospitality technology company formed in 2019 through the merger of Availpro and Fastbooking. It offers a comprehensive suite of hotel marketing and distribution solutions including a Central Reservation System, Booking Engine, Channel Manager, and digital marketing services. Serving over 17,000 hoteliers, D-EDGE positions itself as a key player in the hospitality technology sector, focusing on maximizing revenue for hotels through innovative technology and marketing expertise. The company is headquartered in Paris, France, and maintains a strong online presence with multilingual support and active social media channels. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates various third-party services including Google Analytics, Facebook Pixel, and Didomi for consent management. The site demonstrates good mobile optimization, SEO practices, and performance. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with appropriate headers and no visible vulnerabilities, though the absence of a public security policy or incident response contact is noted. The missing WHOIS data is a concern for domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business scale. Overall, D-EDGE presents a credible, professional, and secure online presence suitable for its B2B hospitality market. Strategic recommendations include publishing detailed security and incident response policies and enhancing accessibility features to further strengthen compliance and user experience.

G

GWF MessSysteme AG

gwf.ch

58

GWF MessSysteme AG is a well-established Swiss company specializing in innovative measurement systems for energy, water, and building technology sectors. With a history spanning over 125 years, the company has evolved from a manufacturer of gas and water meters to a system integrator offering digital and IoT solutions for smart cities, buildings, industries, and infrastructure. Their market position is strong in Switzerland with growing international presence supported by partnerships and service offices. The website reflects a mature digital infrastructure built on WordPress with modern SEO and accessibility practices. Security posture is robust with HTTPS, security headers, CAPTCHA protections, and cookie consent mechanisms in place. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

V

visitaizkraukle.lv

visitaizkraukle.lv

36

The website visitaizkraukle.lv serves as an official regional tourism portal for the Aizkraukle municipality in Latvia. It provides comprehensive information about local attractions, events, accommodations, dining options, and cultural heritage, targeting tourists and visitors interested in exploring the region. The site features galleries, video content, and interactive maps to enhance visitor engagement. Technically, the site uses JavaScript, Google Analytics, Google Tag Manager, and the Kube CSS framework, delivering a moderately performant and mobile-optimized experience. Security-wise, HTTPS is enforced, but the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and protection. The lack of WHOIS data due to query limits restricts full domain trust evaluation, but the presence of official contact information and social media channels supports legitimacy. Overall, the site is a good resource for regional tourism but should enhance privacy compliance and security practices.

S

Semarah Hotels

semarahhotels.com

53

Semarah Hotels operates a network of hotels primarily in Riga and Jurmala, Latvia, offering accommodation, conference facilities, dining, and wellness services. The website presents a professional and consistent brand image with clear navigation and multi-language support. The business targets tourists and corporate clients seeking hospitality and event services. Technically, the site is built on WordPress with the Divi theme, leveraging modern libraries such as jQuery and Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS and reCAPTCHA implemented, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the website reflects a credible and established hospitality business with moderate technical sophistication and good user experience.

Valsts kultūrkapitāla fonds (VKKF) is a Latvian governmental organization dedicated to supporting cultural projects, creative scholarships, and cultural development programs. The website serves as an official portal providing information on funding competitions, supported projects, and cultural events. It targets Latvian cultural professionals, organizations, and the general public interested in cultural funding. The business model is primarily governmental funding distribution, positioning VKKF as a key national cultural funding body. Technically, the website employs a modern frontend stack including Bootstrap and jQuery, with Google Analytics and Tag Manager for user tracking. The site is mobile responsive and uses HTTPS, but lacks advanced security headers and visible privacy or cookie policies, indicating room for improvement in privacy compliance and security posture. Security-wise, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and privacy disclosures are notable gaps. The WHOIS data could not be retrieved due to query limits, but the domain and content appear legitimate and consistent with a government entity. Overall, the website is professional, trustworthy, and functional but would benefit from enhanced privacy compliance, security header implementation, and formal vulnerability disclosure mechanisms to strengthen its security and compliance posture.

C

Cube Agency

cube.lv

71

Cube Agency is a well-established digital agency based in Latvia, specializing in digital creativity, UX design, web development, and digital marketing services. With over 20 years of experience, they position themselves as industry leaders in the Baltic region, focusing on complex digital product creation and user experience design. Their target audience primarily consists of businesses seeking to grow online through technology and creativity. The website reflects a professional and consistent brand image with clear service offerings and a portfolio of selected works. Technically, the site is built on Webflow CMS, uses modern JavaScript libraries like jQuery, and integrates Cookiebot for GDPR-compliant cookie consent management. Google Tag Manager and Hotjar are used for analytics and user behavior tracking, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and dedicated security or incident response policies. The absence of WHOIS data limits domain trust verification, but the overall site professionalism and transparency in contact details support a positive legitimacy assessment. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve trust and compliance.

I

Incredit

incredit.lv

56

Incredit is a licensed Latvian financial services company specializing in consumer and business credit products, operating since 2010 as a subsidiary of Rietumu Banka. The company offers a variety of loan products including consumer loans, auto loans, credit lines, and refinancing options, targeting Latvian consumers and businesses. The website is professionally designed with good content quality, clear navigation, and multiple contact points including physical offices across Latvia. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and secure forms, though some security headers and explicit security policies are absent. Privacy and cookie policies are comprehensive and GDPR compliant with active consent mechanisms. WHOIS data was unavailable due to query limits, limiting domain registration verification, but website content and business information appear legitimate and consistent with a licensed financial institution. Overall, the site demonstrates a mature digital presence with moderate to good security and privacy practices.

C

Callbell S.A.S.

callbell.eu

66

Callbell S.A.S. is a technology company founded in 2019, offering a SaaS omnichannel customer communication platform that integrates popular messaging apps such as WhatsApp, Facebook Messenger, Instagram, and Telegram. The platform targets businesses seeking to centralize and optimize customer support and sales communications through a multi-agent chat system, chatbot automation, and broadcast messaging. Positioned as a Meta Business Partner and trusted by over 75,000 companies worldwide, Callbell demonstrates a strong market presence and a comprehensive suite of services tailored for modern customer engagement. Technically, the website is built on WordPress using the Divi theme, leveraging modern JavaScript libraries and integrations such as Google Analytics, TikTok Pixel, and Zapier SDK. The site is well-optimized for mobile devices, features good SEO practices, and employs GDPR-compliant privacy and cookie policies with consent mechanisms. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses privacy tools like Iubenda for cookie consent. However, explicit security headers are not detected, and there is no published security policy or incident response contact, which are areas for enhancement. No vulnerabilities or suspicious content were found, and the domain registration is consistent and legitimate. Overall, Callbell's website reflects a professional, trustworthy, and business-focused platform with strong branding and user experience. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

N

nra.lv

nra.lv

58

nra.lv is a prominent Latvian news portal offering a wide range of content including current news, opinion pieces, photo galleries, videos, and polls. It targets the Latvian-speaking general public interested in politics, economy, culture, and entertainment. The site operates multiple sister sites, enhancing its market presence in the Latvian media sector. Technically, the website employs modern web technologies such as Google Analytics, Gemius, OneSignal push notifications, and various advertising networks, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and some security best practices, though explicit security headers and incident response policies are not evident. Privacy and cookie policies are present and indicate GDPR compliance. WHOIS data could not be retrieved due to query limits, limiting domain registration trust analysis. Overall, the site appears legitimate and professionally managed with a good security posture and compliance awareness.

P

Profesionālās tālākizglītības centrs "Mācību centrs SG"

sunstaracademy.lv

57

Sunstar Academy is a Latvian professional education center specializing in workplace safety training using modern technologies and interactive methods. It operates under the parent company Sunstar Group and collaborates with subsidiaries Meemo and Optiv to provide a comprehensive suite of services including e-learning platforms and onsite training. The website demonstrates a good level of digital maturity with multimedia content, responsive design, and clear navigation. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy in Latvian. Security posture is solid with HTTPS and CSRF protections, though explicit security headers and incident response information are absent, representing areas for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, but the lack of WHOIS data limits domain legitimacy verification.

S

SIA "Sunstar Group"

sunstar.group

61

Sunstar Group is a Latvian-based company specializing in occupational safety, fire safety, digital safety solutions, and training services. Founded in 2019, the company operates multiple related service lines including Meemo.tech, Sunstar Academy, and Optiv.lv, positioning itself as a comprehensive provider of workplace safety management and consulting. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeted at businesses seeking occupational safety compliance and training solutions. The company demonstrates trustworthiness through ISO 9001 certification and memberships in recognized industry organizations. Technically, the website employs modern web technologies such as Google Tag Manager and Turbolinks, with a responsive design and good SEO practices. Hosting and domain registration are consistent and legitimate, with HTTPS enforced and cookie consent mechanisms in place to comply with GDPR. However, some security best practices like DNSSEC and security headers are not implemented, and no explicit security or incident response policies are published. The security posture is solid but could be improved by adding security headers, publishing incident response information, and enabling DNSSEC. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website and business present a low risk profile with good professionalism and compliance. Strategic recommendations include enhancing DNS security, publishing security policies, and improving security headers to strengthen trust and resilience against cyber threats.

R

RETOURA

retoura.de

66

RETOURA operates a German e-commerce platform specializing in certified B-Ware products, positioning itself as a sustainable and affordable alternative to new and used goods. The website emphasizes trust through its Trusted Shops certification and offers customer-friendly policies such as a 30-day withdrawal period and free returns. Technically, the site leverages modern e-commerce technologies including jQuery, Doofinder search, Google Tag Manager, and PayPal Commerce SDK, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement, secure forms, and consent-based cookie management, though explicit security and incident response policies are not published. Overall, RETOURA presents a professional, trustworthy, and user-friendly online retail experience with moderate tracking and good privacy compliance.

L

limango

limango.de

66

limango is a well-established German e-commerce platform specializing in family-oriented products including fashion, toys, home living, and travel offers. It operates under the Otto Group umbrella, serving over one million families with daily sales campaigns and exclusive brand partnerships. The platform emphasizes discounted pricing and a seamless shopping experience via web and mobile apps. Technically, limango employs modern frameworks such as React and Next.js, hosted on AWS infrastructure with CDN support, ensuring fast and responsive performance. Security is robust with HTTPS, security headers, and consent management implemented, though explicit incident response and vulnerability disclosure policies are absent. Overall, limango presents a mature digital presence with strong business credibility and compliance adherence.

Z

Zalando SE

zalando-lounge.de

48

Lounge by Zalando is a prominent online outlet platform operated by Zalando SE, offering significant discounts on fashion, home goods, and premium lifestyle products. The website targets a broad European audience with localized domains and provides a seamless shopping experience with daily updated deals. Technically, the site leverages modern web technologies including React, RequireJS, and integrates advanced consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and error tracking, though there is room for improvement in security headers and explicit data protection officer contact. Overall, the platform demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable e-commerce destination.

M

Maksekeskus AS

maksekeskus.ee

56

Maksekeskus AS is a leading payment service provider in the Baltic region, offering a comprehensive suite of payment and delivery solutions tailored for e-commerce merchants and retail businesses. Founded in 2010, the company provides services including bank payments, card payments, mobile wallet integrations like Apple Pay and Google Pay, buy now pay later options, payment terminals, and integrated delivery services with major carriers. Their market position is strong, supported by a large client base and positive customer testimonials. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various plugins for enhanced functionality and user experience. Hosting is supported by Amazon AWS infrastructure, ensuring reliability and scalability. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a professional digital presence. From a security perspective, the site enforces HTTPS and employs GDPR-compliant cookie consent mechanisms. While explicit security headers are not fully confirmed, best practices are generally observed. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness. Overall, Maksekeskus presents a secure, professional, and user-friendly platform with strong business credibility. Strategic improvements in explicit security header implementation and publishing a formal security policy could further enhance their security posture.

M

Machineryline Latvija

machineryline.lv

59

Machineryline Latvija operates a well-established online marketplace specializing in construction machinery, industrial equipment, and spare parts. With over two decades in the market and millions of monthly users, it serves a broad audience of businesses and individuals in Latvia and beyond. The platform offers extensive categorized listings, dealer registration, and advertising services, positioning itself as a key player in the regional machinery sales sector. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing, with a good implementation of HTTPS and security headers ensuring a secure browsing experience. However, the absence of a visible cookie consent mechanism and explicit security policies indicates areas for compliance improvement. The lack of WHOIS data due to query limits restricts full domain legitimacy verification, but the website's professional presentation, customer reviews, and social media presence strongly support its credibility. Overall, Machineryline Latvija demonstrates a mature digital presence with solid business credibility, though enhancements in privacy compliance and security transparency are recommended.

S

SIA Dun & Bradstreet Latvia

creditreports.lv

52

SIA Dun & Bradstreet Latvia operates as a branch of the global Dun & Bradstreet group, providing business data, credit ratings, and analytics services primarily to Latvian companies and international partners. The website reflects a professional business model focused on credit risk assessment products such as AAA ratings and D-U-N-S® Registered™ services. The company leverages its global brand and local expertise to maintain a strong market position in Latvia's financial data sector. Technically, the website uses modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and well-structured, offering a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, but the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is partially addressed with linked policies, though cookie consent mechanisms could be enhanced. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or content safety concerns.

W

WidgetWhats

widgetwhats.com

71

WidgetWhats is a small technology company founded in 2018 that provides a SaaS WhatsApp chat widget solution for websites. Their product enables businesses to engage visitors, capture leads, and support customers via WhatsApp integration. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure is modern, hosted on DigitalOcean, and includes analytics via Google Tag Manager and Google Analytics. Security posture is adequate with HTTPS and domain protection, but lacks explicit security headers and incident response policies. Privacy compliance is basic with published policies but no cookie consent mechanism. Overall, the website is trustworthy and functional, serving a niche market of website owners seeking WhatsApp chat integration.

M

Magnite

spotx.tv

66

Magnite is a leading independent sell-side advertising company specializing in programmatic advertising technology across multiple channels including Connected TV (CTV), streaming, online video, display, and audio. The company serves media owners and advertisers globally, providing advanced technology and services to optimize advertising revenue and audience targeting. The website reflects a mature enterprise with a strong market position, supported by multiple industry awards and recognitions. Technically, the site is built on WordPress with modern analytics and marketing tools such as Google Tag Manager, Marketo, Hotjar, and LinkedIn Insight, ensuring good digital maturity and SEO optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, Magnite presents a professional, trustworthy, and well-structured online presence suitable for its enterprise audience.

K

Kissmetrics

kissmetrics.io

57

Kissmetrics is a technology company providing an event analytics platform designed to track human behavior across web, mobile, and other digital channels to help businesses increase revenue and improve customer engagement. The company targets businesses seeking actionable analytics to optimize marketing and product performance. The website is professionally designed, well-branded, and features notable client logos, indicating a strong market position in the SaaS analytics space. Technically, the site is built on WordPress with Elementor and uses modern web technologies including Google Tag Manager and Kissmetrics tracking scripts, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit incident response or security policies are published. Privacy compliance is partially addressed with a privacy policy present and GDPR considerations, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professional, with moderate to extensive user tracking. WHOIS data is privacy-protected, which is common for commercial SaaS businesses, but limits transparency. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing cookie consent to improve privacy compliance.

T

Troika Onlineshop

troika.de

51

Troika Onlineshop is a German e-commerce business specializing in modern gift ideas for men and women. The website presents a broad assortment of gifts and targets a general audience interested in design-oriented presents. The company appears to have been established around 2014, with hosting and domain registration consistent with a German-based small business. The website's technical infrastructure includes Google Tag Manager for analytics and a chat widget for customer interaction, hosted on Telekom domains, indicating reliable local hosting. However, the CMS and backend technologies are not explicitly identified from the provided data. From a security perspective, the website lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure mechanisms are evident, and no contact information is explicitly provided in the analyzed content. The SSL configuration and HTTPS enforcement could not be fully assessed from the HTML snippet, but the presence of canonical HTTPS URLs suggests at least basic SSL usage. Overall, the website is functional and professionally designed with good SEO metadata and mobile optimization. However, the absence of privacy and cookie policies, security headers, and contact details reduces its compliance and security posture. Strategic improvements in these areas would enhance trustworthiness and regulatory compliance.

T

The Outdoors Company

theoutdoorscompany.co.uk

45

The Outdoors Company is a UK-based retailer specializing in premium outdoor clothing and personalisation services for businesses. Established in 2007, the company offers a curated selection of well-known brands such as The North Face, Adidas, and others, targeting business customers seeking quality outdoor apparel. The website is built on WordPress with WooCommerce, supporting multilingual content and multi-currency options, reflecting a mature e-commerce infrastructure. The technical setup includes modern analytics and marketing tools such as Google Analytics, Hotjar, Microsoft Clarity, and LinkedIn Insight, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security measures include HTTPS enforcement, reCAPTCHA on forms, and implied use of Wordfence security plugin, though some security headers could be improved. Overall, the site presents a professional and trustworthy digital presence with good user experience and clear business focus.

F

Falk & Ross

falk-ross.eu

59

Falk & Ross operates as a pan-European distributor specializing in promotional products such as T-Shirts, Jackets, Bags, Caps, and Workwear. The company targets both B2C and business customers through a professional e-commerce platform powered by OXID eShop. Their market position is that of a medium-sized distributor with a broad product range and multi-language support, indicating a mature digital presence across Europe. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and personalization tools, ensuring a good user experience and moderate performance. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and secure login forms, although additional security headers could enhance protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-structured, with no critical security issues detected.

G

GOYA IMPORTACIONES Y DISTRIBUCIONES, S.L.

ggoya.com

65

Goya Importaciones y Distribuciones, S.L. is a Spanish company specializing in the supply and distribution of promotional gift products, targeting distributors and professionals. With over 30 years of experience, it holds a strong market position in the retail and B2B promotional products sector. The website is built on the nopCommerce platform, featuring a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and anti-forgery tokens in forms, although some HTTP security headers are missing. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies in Spanish, aligned with GDPR requirements. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the website is professional, trustworthy, and well-maintained, serving its business audience effectively.

T

Tejo Brinde – Comércio de Brindes Promocionais, Lda.

tejobrinde.pt

59

Tejo Brinde – Comércio de Brindes Promocionais, Lda. is a leading supplier of promotional and personalized gifts in Portugal, offering a wide range of products with own production capabilities and fast delivery services. The company targets businesses and organizations seeking customized promotional items, positioning itself as the largest supplier in the Portuguese market with a strong presence also in Spain. The website reflects a professional business model focused on B2B sales with comprehensive service offerings including personalization and multiple product catalogs. Technically, the website employs modern analytics tools such as Google Analytics, Hotjar, and Microsoft Clarity, and uses HTTPS with cookie consent mechanisms to comply with privacy regulations. The site is mobile optimized and provides clear navigation and contact information. Security posture is solid with encrypted connections and secure forms, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

G

Giving Europe B.V.

givingeurope.com

75

Giving Europe B.V. operates as a European wholesaler specializing in promotional products, targeting businesses and resellers across Europe. The company emphasizes no-nonsense service with over 20 years of industry experience, offering key services such as 24-hour production, marketing tools, and printing and delivery. The website reflects a professional B2B e-commerce platform with consistent branding and good content quality. Technically, the site leverages Magento CMS, Google Tag Manager, Cookiebot for consent management, and New Relic for performance monitoring, indicating a mature digital infrastructure. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be further investigated. Security posture is moderate with HTTPS enforced but lacking explicit security headers and visible privacy policies. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security practices.

MAKITO is a Spanish-based company specializing in the sale of promotional products through a professional e-commerce platform. The website offers a broad catalog of items ranging from office supplies to textiles and sustainable products, targeting businesses and professionals seeking branded merchandise. The site is built on the ePages platform and incorporates modern web technologies including jQuery, RequireJS, and Google Analytics for tracking and marketing purposes. While the website is well-structured and visually consistent, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data for the domain is not publicly accessible due to registry restrictions, limiting the ability to fully verify domain legitimacy. Overall, the website demonstrates a solid technical foundation and business presence but would benefit from enhanced privacy disclosures and security headers.

A

ANDA Present Ltd.

andapresent.com

64

ANDA Present Ltd. is a well-established company founded in 2002, specializing in the B2B sale of promotional products and marketing tools. The company offers a broad product catalog including categories such as food & drinkware, bags, technology accessories, writing instruments, office supplies, and sustainable product lines. Their market position is that of a mature player with a medium-sized business footprint, primarily serving businesses seeking promotional gifts and customized marketing solutions. The website reflects a professional and consistent brand image with a focus on ESG and sustainability initiatives. Technically, the website employs modern web technologies including Google Tag Manager, SVG icons, and responsive design frameworks like Bootstrap. Hosting is provided by hostingnet.hu, and the domain is long-standing with a registration dating back to 2002. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers. There are no visible incident response or security policy pages, and no vulnerability disclosure or security.txt files were found. Privacy compliance is basic, with a privacy policy present but no cookie consent banner detected. Contact information is limited to address and social media links, with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional with a solid business foundation, but could enhance its security posture and privacy compliance to meet higher standards. Strategic improvements in security headers, cookie consent, and incident response documentation are recommended to strengthen trust and compliance.