High-risk security reports

K

Korin, Inc

korin.com

48

Korin, Inc is a specialized e-commerce retailer focused on professional quality Japanese chef knives, tableware, kitchenware, and restaurant supplies. Established in 1982, the company serves professional chefs, restaurants, and culinary enthusiasts worldwide, offering a wide range of imported Japanese knives, sharpening stones, kitchen tools, and barware. The website demonstrates a strong market position in the niche culinary supply sector with worldwide shipping and additional services such as knife sharpening and custom engraving. Technically, the website is built on the NetSuite SuiteCommerce platform, utilizing modern JavaScript libraries and frameworks such as RequireJS and jQuery. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. The technical infrastructure appears stable and professional, supporting a seamless user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business presence appear credible. Overall, Korin.com is a professional and trustworthy e-commerce site with strong business credibility and good technical implementation. Addressing domain registration transparency, enhancing privacy compliance, and improving security headers would further strengthen its security posture and trustworthiness.

S

SIA Kurzemes Biznesa inkubators

kbi.lv

49

SIA Kurzemes Biznesa inkubators is a regional business incubator established in 2008, focused on supporting small and medium-sized enterprises in the Kurzeme region of Latvia. The company offers business management consulting, accounting services, digital marketing, and office space rental, positioning itself as a key facilitator of local business growth and innovation. Their website reflects a professional and consistent brand image with clear service offerings and contact information, targeting SMEs and startups in the region. Technically, the website is built on the Mozello CMS platform, leveraging Amazon CloudFront CDN for content delivery and using common JavaScript libraries such as jQuery and Fancybox. Google Analytics is integrated for visitor tracking, complemented by a cookie consent banner indicating GDPR compliance awareness. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements client-side form validation and cookie consent mechanisms. However, it lacks advanced security headers and does not provide explicit security or incident response policies. The absence of WHOIS data limits domain registration trust verification, but the visible business information and social media presence support legitimacy. Overall, the website presents a trustworthy and professional front for a small regional business incubator, with moderate technical sophistication and a good privacy posture. Strategic improvements in security headers, server-side validation, and transparency around security policies would enhance the security posture and trustworthiness further.

S

Soft-FX

soft-fx.com

36

Soft-FX is a fintech software development company specializing in comprehensive FX and digital asset trading software solutions. The company targets brokerages, blockchain platforms, and proprietary trading firms, offering a broad portfolio of products including margin trading solutions, liquidity aggregation, deliverable trading software, and risk management tools. With over 30 completed projects and a presence in more than 22 countries, Soft-FX positions itself as a mature and innovative player in the financial technology sector. Technically, the website is built on the Ghost CMS platform and utilizes modern JavaScript libraries such as jQuery and Swiper for UI components. It integrates analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and HubSpot forms, indicating a digitally mature infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses asynchronous loading for third-party scripts, reducing performance impact and potential vulnerabilities. However, no explicit security headers were detected in the provided data, and there is no visible incident response or security policy documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business presence appear professional and trustworthy. Overall, Soft-FX presents a strong business and technical profile with room for improvement in transparency and security documentation. The risk assessment is moderate due to the missing WHOIS data, but the operational and content quality supports a positive trust posture.

H

Hotel Bergs Suites

hotelbergs.lv

40

Hotel Bergs Suites is a four-star boutique hotel located in the heart of Riga, Latvia, offering spacious designer suites and event hosting facilities. The hotel targets both leisure and business travelers seeking premium accommodation and meeting venues in a historic city center location. The website presents a professional and consistent brand image with clear contact details and booking options. Technically, the site uses a PyroCMS backend with common frontend libraries such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible advanced security headers and published security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is trustworthy and credible, though WHOIS data is unavailable due to query limits, which slightly limits domain legitimacy verification.

K

Konig

konig.lv

43

Konig is a Latvian wholesale and distribution company established in 1994, operating as a leading player in the Latvian market. The company offers a broad range of services including distribution, logistics, and merchandising, targeting wholesale customers and businesses. The website reflects a professional digital presence built on WordPress with Elementor and Astra theme, showcasing partnerships with well-known brands. Technically, the site is modern and mobile-optimized, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No WHOIS data was available due to query limits, limiting domain trust verification. Overall, the site is credible but could improve privacy compliance and security transparency.

C

Chevalier Floatels B.V.

cfbv.com

47

Chevalier Floatels B.V. is a specialized company operating in the offshore energy and maritime sector, providing walk to work vessels and floating accommodation barges. With over ten years of industry experience, the company emphasizes safety, efficiency, and quality service delivery. Their website reflects a professional presence with clear business information and contact details, targeting clients needing offshore accommodation and support vessels. Technically, the site is built on WordPress with common plugins like Yoast SEO and Revolution Slider, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness despite the professional website. Overall, the site scores well on content and business credibility but should improve transparency and security practices.

R

Reklamas Nams

reklamasnams.lv

42

Reklamas Nams is a Latvian-based company specializing in custom retail merchandising solutions, including visual merchandising displays, point of purchase displays, racks, stands, and related retail fixtures. Founded in 2006, the company has built a solid reputation working with prominent retail brands such as L'Oreal, COTY, CHANEL, and SHISEIDO. Their business model focuses on B2B manufacturing and technical design services, targeting retailers and brands seeking bespoke merchandising solutions. The website reflects a professional and consistent brand image with a clear presentation of services and portfolio.

S

SOLAVI SIA

solavi.lv

41

SOLAVI SIA is a Latvian smart technology company specializing in audiovisual solutions including sound, light, and video technologies. Founded in 2009, the company offers consulting, design, installation, servicing, and sales of AV equipment and stage solutions. Their website reflects a professional presence with clear business focus on audiovisual technology for regional clients. Technically, the website uses legacy jQuery and standard tracking tools like Google Analytics and Tag Manager, with a cookie consent mechanism indicating GDPR awareness. Security posture is moderate with room for improvement in security headers and modern library usage. No WHOIS data was available due to query limits, limiting domain trust verification. Overall, the website is functional, professionally designed, and compliant with privacy norms, but could enhance security and contact transparency.

F

First Beat Media

firstbeatmedia.com

47

First Beat Media is a small online entertainment media company specializing in niche online dating platforms and digital marketing services. The company operates multiple niche dating websites aimed at connecting users with similar interests. Their business model focuses on leveraging prime domains to build targeted online brands and generate traffic through advertising. The website content is basic but clearly communicates the company's focus and services. Technically, the site uses older JavaScript libraries and lacks modern security headers and privacy policies, indicating room for improvement in digital maturity. Security posture is moderate with domain locking in place but missing DNSSEC and security headers. No privacy or cookie policies were found, which impacts GDPR compliance and user trust. Overall, the website is functional but would benefit from modernization and enhanced security and privacy practices.

Intellego is a Latvian-based psychology and cognitive behavioral therapy center providing evidence-based consultation services to individuals, businesses, and professionals. The website presents a professional and well-structured digital presence with clear navigation and good content quality, targeting a small healthcare market segment. The company appears to be a small-sized entity founded in 2017, focusing on therapy and consultation services. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS usage and secure form inputs, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is trustworthy but could improve transparency and compliance documentation.

H

Hansatelecom Ltd.

hansatelecom.com

49

Hansatelecom Ltd. is a telecommunications company based in Latvia, specializing in SIP trunking solutions for international business calls. The company emphasizes call quality, anti-fraud measures, fair pricing, and personalized customer service. Their website reflects a focused business model targeting enterprises requiring reliable international telephony services. The domain is well-established since 2005, consistent with the company's operational history. Technically, the website is built on WordPress 5.5.15 with jQuery and uses the Contact Form 7 plugin for customer interactions. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. There are no visible privacy or cookie policies, which impacts compliance with GDPR and related regulations. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy image but would benefit from enhanced privacy compliance and security hardening to improve its risk posture and regulatory adherence.

PREPARE - Partnership for Rural Europe is a small non-profit organization focused on fostering collaboration and development in rural European areas. The website serves as an informational and networking platform, offering newsletters, event information, and links to partner organizations. The business model centers on partnership and knowledge sharing within the rural development sector. The domain age and WHOIS data support the legitimacy of the organization, with registration dating back to 2003 and consistent registrant information from Germany. Technically, the website is built on an outdated Joomla! 1.5 CMS platform, which poses significant security risks due to lack of support and known vulnerabilities. The site lacks HTTPS, security headers, and modern security best practices. The technical infrastructure is basic, with moderate performance and limited mobile optimization. The site uses JavaScript libraries such as MooTools and jQuery but does not employ modern frameworks or analytics tools. From a security perspective, the absence of HTTPS and security headers, combined with an outdated CMS, significantly lowers the security posture. No privacy or cookie policies are present, and no contact information or incident response channels are clearly provided. These factors indicate low privacy compliance and limited security maturity. Overall, the website is functional but basic, with moderate business credibility but poor security and privacy compliance. Strategic improvements in security infrastructure, privacy policy implementation, and CMS modernization are recommended to enhance trust and protect user data.

The website mesako.com currently serves as a minimal placeholder page that uses a frameset to load content from an external domain (mesako.lv). There is no substantive content, metadata, or business information directly available on the domain itself. The domain is registered with a reputable registrar and has been active since 2009, indicating a stable registration history, but the lack of content suggests underutilization or a redirect strategy rather than an active business presence. Technically, the site lacks modern web standards such as HTTPS, security headers, and responsive design, which limits its digital maturity and exposes it to security risks. From a security perspective, the absence of HTTPS and security policies, combined with no visible contact or compliance information, results in a low security posture and poor privacy compliance. Overall, the site presents a high risk for trust and credibility, and significant improvements are needed to meet basic security and compliance standards.

The domain dockwise.com is registered since 1997 and hosted on Microsoft Azure platform. However, the website currently serves only a default Azure 404 error page indicating that the site content is not configured or missing. There is no visible business information, branding, or contact details on the site. The lack of content and policies suggests the website is either under construction or abandoned. From a technical perspective, the site is hosted on Azure App Service but lacks HTTPS information and security headers in the provided data. No CMS or analytics tools are detected, and the site does not provide any forms or data collection mechanisms. The performance and accessibility cannot be fully assessed due to the minimal content. Security posture is weak due to absence of HTTPS, security headers, and privacy compliance indicators. The domain registration is consistent and legitimate, but the website itself does not demonstrate operational maturity or trustworthiness. There are no signs of WAF or security blocking mechanisms. Overall, the website is non-functional and presents critical issues that severely limit its usability, security, and compliance. Strategic recommendations include enabling HTTPS, deploying actual website content, adding privacy and cookie policies, and implementing security best practices to improve trust and compliance.

The website oberthur.com is currently inaccessible, displaying only a minimal maintenance message in French indicating the site is temporarily unavailable. Due to the lack of accessible content, no metadata, structured data, contact information, or business details could be extracted. The domain is long-established, registered since 1997 through a reputable registrar with standard domain protection statuses, but DNSSEC is not enabled. The technical infrastructure cannot be fully assessed due to the absence of content and technical indicators. Security posture is limited to WHOIS data analysis, showing no immediate red flags but lacking advanced security configurations. Overall, the site’s unavailability severely limits the ability to evaluate its compliance, security, and business credibility.

W

We Build Parks

webuildparks.com

42

We Build Parks is a specialized design and construction company focused on action sports venues and equipment manufacturing for snow, wake, bike, skate, and activity parks primarily in the Baltics and Scandinavia. The company operates a professional and well-structured website that clearly communicates its services and target markets. The technical infrastructure is based on WordPress with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is limited due to absence of privacy and cookie policies, representing a compliance risk. Overall, the website is credible and functional with room for improvement in security and privacy practices.

The website tcprtp.hisg.org is a parked domain page primarily targeting domain buyers, offering the domain hisg.org for sale. The content is minimal, mostly consisting of affiliate advertisements related to health information and Amazon deals. There is no substantive business information, contact details, or privacy policies presented, indicating the site is not actively used for business operations. Technically, the site uses basic HTML and JavaScript with no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation and absence of security headers. WHOIS data is unavailable due to a malformed request response, which limits trust and legitimacy assessment. Overall, the site is low trust and low content quality, serving mainly as a domain parking and affiliate marketing page.

S

Streets Insurance

streets.net.nz

37

Streets Insurance is a small, established insurance and mortgage brokerage based in Christchurch, New Zealand, with a history dating back to 1987. The company offers a range of personalized insurance products including life assurance, trauma cover, income protection, mortgage protection, and business insurance. The website reflects a professional and consistent brand image targeting individuals and businesses seeking insurance solutions in New Zealand. Technically, the site uses common web technologies such as jQuery and Google Analytics, with moderate performance and good mobile optimization. However, there is no evidence of HTTPS enforcement or security headers, which are critical for protecting user data and ensuring trust. Privacy and cookie policies are absent, indicating a gap in compliance with data protection regulations. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy but does not necessarily imply malicious intent given the professional content and contact information provided. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and protect users.

S

S-Print Baltic

s-print.lv

27

S-Print Baltic is a small Latvian company specializing in printing and advertising services, including commercial spaces, exhibitions, industrial screen-printing, and polygraphy. The website indicates a service-oriented business model targeting organizations needing various printing solutions. The digital infrastructure is based on WordPress with the Enfold theme, utilizing common web technologies such as jQuery, Google Fonts, and Facebook SDK. However, the site lacks HTTPS, which is a critical security shortfall. Security measures include Google reCAPTCHA v3 for form protection, but no advanced security headers or policies are evident. The absence of privacy and cookie policies, contact information, and WHOIS transparency reduces trust and compliance posture. Overall, the website is functional but basic, with moderate technical implementation and poor privacy compliance.

S

SIA Industry Service Partner

ispartner.lv

45

Industry Service Partner (ISP) is a Latvian industrial services company specializing in equipment maintenance, repair, building services, full cycle projects, process automation, audits, and training. The company targets multiple industrial sectors including metal processing, energy, woodworking, paper and packaging, food industry, water supply and sewage, and real estate. Their business model focuses on providing knowledge-based efficiency improvements and collaborative client relationships. The website is professionally designed with clear navigation and multilingual support (Latvian and English). The company presents named executives and comprehensive contact information, enhancing business credibility. Technically, the website employs modern JavaScript libraries such as jQuery, jQuery UI, and Slick Slider, and integrates Google Analytics and Google Tag Manager for user tracking. The site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and a published privacy policy or terms of service. Performance and mobile optimization are moderate to good, with room for accessibility improvements. From a security perspective, the site demonstrates basic best practices like HTTPS and cookie consent but lacks advanced security headers and incident response information. No WHOIS data was retrievable due to query limits, limiting domain trust analysis. Overall, the security posture is moderate with recommendations to improve transparency and security controls. The overall risk assessment suggests a functional and credible industrial service website with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and incident response disclosures would enhance trust and reduce risk.

J

Junior Achievement Latvia

jalatvia.lv

48

Junior Achievement Latvia is a well-established non-profit educational organization founded in 1991, focusing on practical business education and leadership development for youth in Latvia. The website serves as a portal for students, teachers, and schools to access programs such as student companies, leadership initiatives, and career shadowing events. The organization maintains partnerships with reputable entities such as Swedbank and the Latvian Investment and Development Agency, enhancing its credibility and reach. Technically, the website employs standard web technologies including jQuery, Slick Carousel, Google Analytics, and Facebook SDK. It uses HTTPS and has a moderate performance profile with basic mobile optimization. However, it lacks some modern security headers and cookie consent mechanisms, which are recommended for compliance and security enhancement. From a security perspective, the site shows good practices like HTTPS usage and no visible sensitive data exposure. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the presence of clear contact information, privacy policy, and partner logos supports trustworthiness. The site does not currently provide explicit security policies or incident response contacts. Overall, the website is professional, content-rich, and serves its educational mission effectively. Strategic improvements in security headers, cookie consent, and transparency around security policies would further strengthen its posture and compliance.

B

Biznesu apvienība KONSUL’S

konsuls.lv

47

Biznesu apvienība KONSUL’S is a Latvian-based business association specializing in business training, corporate and open seminars, psychotherapy, and personal growth consultations. Established around 2014, it serves companies, organizations, managers, teams, and individuals primarily in Latvia and Eastern Europe. The company combines modern business management methods with practical psychology to foster professional and personal development. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning it as a trusted provider in its niche. Technically, the site is built on WordPress with modern plugins and good SEO practices, offering a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable due to query limits, limiting full domain trust assessment. Overall, the site demonstrates a mature digital presence aligned with its business goals.

F

Forma Pro Films

formaprofilms.com

40

Forma Pro Films is an established international film production company founded in 2011, specializing in conceptualizing, producing, and distributing film and television content globally. The company offers a comprehensive range of production services including casting, legal, accounting, payroll, budgeting, scheduling, scouting, and crew hire, with unique regional assets such as an equipped sound stage and in-house professional equipment. The website reflects a professional media company with a solid market position and partnerships with notable industry players like Netflix and Fremantle. Technically, the website is built on WordPress using the Flatsome theme and incorporates modern web technologies such as jQuery and Flickity sliders. The site is mobile optimized and presents a good user experience with multimedia content. However, there is room for improvement in SEO, accessibility, and performance optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data, but lacks important security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating potential gaps in security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

AS Ķekava Foods is a Latvian poultry and meat product manufacturer formed in 2024 by merging several local poultry companies. It operates as part of the AB Akola group, the largest agricultural and food production conglomerate in the Baltics. The company targets both B2B clients and consumers with a focus on high-quality poultry products. The website is built on WordPress, leveraging modern JavaScript libraries and SEO plugins, indicating a moderate level of digital maturity. Privacy and cookie policies are present, reflecting compliance with GDPR requirements. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit incident response information. Overall, the website presents a professional and trustworthy image consistent with a large manufacturing business in Latvia.

The website hosted at unicreditbank.lv currently serves a generic CentOS placeholder page unrelated to the domain name or any banking business. The content describes CentOS Linux distribution and community resources, indicating the domain is either unused or misconfigured. There is no business-specific content, contact information, or compliance documentation present. Technically, the site lacks HTTPS and security headers, and no modern web technologies or tracking scripts are detected. The WHOIS data could not be retrieved due to query limits, preventing verification of domain ownership or legitimacy. Overall, the site appears inactive or abandoned, with minimal security posture and no privacy compliance measures.

M

Movers.lv

movers.lv

47

Movers.lv is a professional moving and relocation service provider based in Latvia, offering comprehensive services to both private individuals and corporate clients across Latvia and Europe. Their offerings include packing, moving, storage, furniture and retail equipment assembly, and a unique BoxRent plastic box rental service. The company demonstrates a solid market position with numerous client references and partnerships, indicating a well-established business. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Google Analytics, with basic mobile optimization and user experience. Security measures include the use of Google reCAPTCHA on forms, but lack visible security headers and explicit privacy policies, which are areas for improvement. Overall, the website is functional and professional but could enhance its security posture and privacy compliance to increase trustworthiness.

C

Circus Day Nursery

circusdaynursery.co.uk

47

Circus Day Nursery is an independent, family-run early years childcare provider located in Cheltenham, UK. The nursery offers a comprehensive range of childcare services from baby suites to pre-school, including government-funded options and a focus on mindfulness and child development. The business is well-established, recognized with national and local awards, and holds OFSTED certification, positioning it as a trusted provider in the education sector. The website reflects a professional and consistent brand image with detailed service descriptions and policies, targeting parents seeking quality childcare in the region. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS, security headers, and CAPTCHA-protected forms, though some compliance gaps exist such as the absence of a cookie consent banner and published security policies. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and accessibility.

Orkla Latvija is a prominent Latvian food product company managing several beloved local brands such as Laima, Selga, Staburadze, and Ādažu Čipsi. The company emphasizes quality raw materials, brand heritage, and sustainability, operating both manufacturing and retail outlets including the Laima chocolate museum. The website is professionally designed, mobile-optimized, and SEO-friendly, built on WordPress with modern technologies like Vue.js and Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though security headers and explicit incident response information are lacking. WHOIS data was unavailable due to query limits, but the website content and branding strongly indicate a legitimate and established business. Overall, the site reflects a mature digital presence aligned with business goals and compliance requirements.

Bajtel.lv is a Latvian-based company established in 2007, specializing in the distribution of sports and lifestyle electronics, including navigation and fitness devices. The company has positioned itself as a leading supplier in the Baltic region, representing major brands and expanding its portfolio over time. The website is built on WordPress using Elementor and related plugins, indicating a modern and maintainable technical infrastructure. The site is accessible, mobile-optimized, and uses HTTPS with good SSL configuration. However, the absence of privacy and cookie policies, lack of visible contact information, and missing WHOIS data reduce overall trust and compliance posture. Security best practices such as security headers are not evident, and no incident response or data protection officer information is provided. Overall, the site presents a professional business presence but requires improvements in transparency, privacy compliance, and security hardening.

G

Get & Post LLC

getandpost.com

29

Get & Post LLC operates a small-scale website primarily focused on sharing media content and providing simple utility links such as surveys, calendar alerts, and lost and found boards. The site is minimalistic, under construction, and lacks comprehensive business or security information. The technical infrastructure is basic, relying on jQuery and custom JavaScript with no modern frameworks or CMS detected. The site is hosted via GoDaddy with no HTTPS enabled, which significantly impacts its security posture. There are no privacy or cookie policies, no contact information, and no security headers, indicating a low maturity level in compliance and security practices. Overall, the site appears to be a hobbyist or small local business project with limited digital maturity and security readiness.

T

TheMiceCream

themicecream.com

39

TheMiceCream is a specialized travel and event management company focusing on corporate events and unique cultural experiences in the Baltic region. The company leverages over 20 years of industry experience and serves a diverse international clientele. Their website reflects a professional service offering with detailed descriptions and client testimonials, positioning them as a niche regional expert in hospitality and event services. Technically, the website is built on WordPress using common JavaScript libraries like jQuery and Owl Carousel, providing a moderate performance and good mobile responsiveness. However, the absence of WHOIS data raises concerns about domain legitimacy, and the lack of privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

Kāgo is a Latvian small business specializing in the retail and service of quality flooring materials such as parquet, laminate, linoleum, and carpets. The company also offers installation, restoration, and maintenance services, positioning itself as a trusted local provider with over 20 years of experience. The website content is well-structured and provides clear contact information, targeting consumers and businesses seeking flooring solutions in Latvia. Technically, the website uses basic HTML, CSS, and JavaScript with FontAwesome icons but lacks advanced frameworks or CMS. Mobile optimization and accessibility are basic, and no analytics or tracking scripts are detected. Security posture is weak due to the absence of HTTPS verification, security headers, and privacy policies, which poses compliance and trust risks. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to enhance trust and protect user data.

B

Barbara Bula Arhitekti

aistudija.lv

44

Barbara Bula Arhitekti is a small architectural and interior design studio based in Latvia, specializing in architecture and interior design projects for commercial and residential clients. The website showcases a comprehensive portfolio of projects, indicating an established presence since 2005. The technical infrastructure is built on GravCMS with Gantry5 framework and UIkit frontend, incorporating modern web technologies and Google Analytics for visitor insights. The site is mobile optimized and provides a cookie consent mechanism aligned with privacy best practices. Security posture is moderate with HTTPS enabled and IP anonymization for analytics, but lacks explicit security headers and detailed privacy policies. Overall, the website presents a professional and trustworthy image but would benefit from enhanced transparency and security documentation.

F

FK Rīgas Futbola Skola

fkrfs.lv

43

FC RFS is a Latvian football club with an official website providing comprehensive information about the club, including news, match schedules, results, ticket sales, and media galleries. The website targets football fans and the Latvian sports community, positioning itself as a prominent participant in the Tonybet Virslīga league. The site demonstrates consistent branding and active engagement through multiple social media channels and sponsorships. Technically, the website is built on WordPress with modern technologies such as jQuery, FontAwesome, and Swiper.js, and is optimized for mobile devices with good SEO practices implemented via the Yoast SEO plugin. Security-wise, the site uses HTTPS with a valid SSL certificate but lacks some recommended security headers and explicit privacy or security policies. No WHOIS data was available due to query limits, but the website content and structured data indicate legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security posture.

S

SIA Finance 360

finance360.eu

38

SIA Finance 360 operates as a Latvian financial services company offering integrated financial solutions aimed at clients and partners seeking comprehensive financial support. The company emphasizes fast, secure, and risk-mitigated services with fair pricing and collaboration among market participants. The website content is primarily in Latvian and presents basic corporate information including the company registration number, but lacks detailed privacy, cookie, or terms of service policies. Technically, the website uses older JavaScript libraries such as jQuery 1.9.1 and minimal modern web technologies, with no detected CMS or advanced frameworks. Security posture is moderate but could be improved by updating libraries and implementing security headers. No analytics or tracking tools are evident, indicating minimal user tracking. Overall, the site presents a basic but functional online presence with moderate trustworthiness.

Gamelab is an academic web application designed for conducting online game theory experiments, primarily targeting researchers and experimenters in the field of economics and social sciences. The platform supports two-player normal-form games with features such as lottery incentives and Mechanical Turk integration. The project is open source and encourages academic citation, positioning itself as a niche tool within the academic research community. The business entity behind the site is SIA k-Consulting, based in Germany, with the domain registered since 2015, reflecting a mature and stable project. Technically, the website employs a straightforward stack including HTML5, CSS3, Font Awesome, Google Fonts, and a C-based web framework (kcgi) hosted on OpenBSD. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No CMS or advanced hosting provider details are evident. External dependencies are limited to trusted sources such as GitHub and Google Fonts. From a security perspective, the site lacks several modern security best practices. There are no detected security headers, DNSSEC is not enabled, and no privacy or cookie policies are present, which impacts compliance with GDPR and other regulations. The domain registration is consistent and legitimate, but the absence of incident response or vulnerability disclosure information suggests room for improvement in security maturity. Overall, the website is functional, professionally presented, and trustworthy within its academic niche but would benefit from enhanced security measures, privacy compliance, and clearer business contact information to improve trust and regulatory adherence.

A

A/S Balticovo

balticovo.lv

46

Balticovo is a well-established Latvian company specializing in egg and egg product manufacturing, holding a leading market position in Northern Europe. Their website reflects a mature business with a clear product portfolio targeting both retail and wholesale customers, including the HoReCa sector. The digital infrastructure is built on OctoberCMS with modern JavaScript libraries, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification, but the website content and business information strongly indicate legitimacy. Overall, Balticovo demonstrates a professional online presence aligned with its market stature.

C

Core Deep Solutions

bctg.lv

45

The website bctg.lv is a login portal branded as 'FRIGATE by Core Deep Solutions'. It appears to serve as an access point for users of a software product or service named FRIGATE. The public-facing content is minimal, with no descriptive business information, contact details, or policies visible. The technical infrastructure relies on older JavaScript libraries such as jQuery 1.9.1 and Bootstrap, indicating moderate digital maturity but some technical debt. The site is mobile responsive and uses HTTPS, but lacks visible security headers and advanced security controls such as multi-factor authentication or CAPTCHA. No WHOIS data was retrievable due to query limits, limiting domain legitimacy verification. Overall, the site presents a basic, functional interface with limited transparency or trust signals.

B

Bon

bon.be

49

Bon is a Brussels-based government-supported integration office providing multilingual inburgering (integration) programs and services to newcomers and local organizations. The website is well-structured, professionally designed, and offers comprehensive content in multiple languages, targeting immigrants and organizations in Brussels. Technically, the site uses Drupal CMS with Google Tag Manager for analytics and tracking, and it is hosted by a reputable Belgian registrar. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The domain is long-established and consistent with the organization's claims, enhancing trustworthiness. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

W

Westfal-Larsen

wlco.no

47

Westfal-Larsen is a well-established Norwegian maritime company with over a century of experience, specializing in shipping ownership, fleet management, real estate, and ozone technology development. The company operates as a family-run business with diversified interests and a solid global market position. The website reflects a professional digital presence built on WordPress, featuring clear navigation and good content quality. However, some privacy compliance elements such as cookie policies and consent mechanisms are missing, and security headers are not implemented, which could be improved to enhance security posture. Overall, the domain registration and website content are consistent, indicating a legitimate and trustworthy business entity.

The website kinokosmos.ee is currently inaccessible, returning a 403 Forbidden error which blocks access to any meaningful content. The domain is registered with Zone Media OÜ in Estonia since 2014, indicating a stable registration history. However, the lack of accessible content prevents analysis of business operations, services, or compliance documentation. The technical infrastructure shows basic SSL support but lacks DNSSEC and security headers, suggesting minimal security hardening. Due to the blocked content, no privacy, cookie, or contact policies are available, resulting in a low privacy compliance posture. Overall, the site presents a low trust profile and limited business credibility in its current state.

E

Eco Baltia

ecobaltia.lv

47

Eco Baltia is a leading environmental management and recycling group in the Baltic region, providing a full cycle of waste management services including collection, sorting, recycling, and secondary raw materials processing. The company emphasizes sustainability and circular economy principles, serving both businesses and residents primarily in Latvia. The website reflects a mature digital presence built on WordPress with multilingual support and investor transparency. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site projects a professional and trustworthy corporate image with comprehensive business and contact information.

The website skd-bojkovice.cz is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any substantive content. As a result, no business information, contact details, or policy documents are available for analysis. The domain is registered since 2020 with REG-TELE3 and uses Cloudflare name servers, indicating a legitimate registration but limited public data. The technical infrastructure relies on Cloudflare's security and CDN services. Due to the blocking mechanism, the website's security posture cannot be fully assessed, but the presence of Cloudflare suggests some baseline protection. However, the lack of visible security headers and policies is a concern. Overall, the site scores very low on content quality, privacy compliance, and business credibility due to inaccessibility.

I

INTRAC LATVIJA SIA

intrac.lv

47

INTRAC LATVIJA SIA is a medium-sized Latvian company specializing in the sales and after-sales service of industrial and agricultural machinery, targeting sectors such as forestry, agriculture, construction, and industry. The company holds a leading market position in Latvia for the products it represents and maintains a network of sister companies in neighboring Baltic countries. The website reflects a professional business presence with clear product categorization and comprehensive contact information. Technically, the website employs standard web technologies including jQuery and Google Analytics, with HTTPS enforced and CSRF protection on forms. The cookie consent mechanism indicates awareness of privacy regulations. However, the site lacks advanced security headers and accessibility features, and mobile optimization is basic. Performance is moderate, with room for improvement in SEO and technical modernization. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and limited security policy information suggest areas for enhancement. Privacy compliance is addressed through cookie consent and a privacy policy, though GDPR compliance could be further strengthened with explicit data retention disclosures. Overall, the website is trustworthy and professionally maintained, but the lack of WHOIS data due to query limits reduces confidence in domain registration transparency. Strategic improvements in security headers, accessibility, and technical modernization are recommended to enhance the site's security and user experience.

A

AS "Rīgas Dzirnavnieks"

rigas-dzirnavnieks.lv

49

AS "Rīgas Dzirnavnieks" is a prominent grain processing company based in Latvia, recognized as one of the largest in the Baltic region. The company specializes in the procurement and processing of grains, producing flour and oat-based products under brands such as Herkuless and Selma. Their website reflects a well-established business with a clear market position targeting both consumers and agricultural partners. The digital infrastructure is built on WordPress with AngularJS enhancements, providing a modern and responsive user experience. SEO and content quality are good, supporting their business visibility and engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data limits full domain legitimacy assessment, but the website's professional presentation and social media presence support its credibility. Overall, the site demonstrates a mature digital presence aligned with the company's manufacturing business model.

The website at dinamoriga.eu currently presents no accessible content beyond an empty HTML skeleton, indicating either an inactive or placeholder site. The WHOIS data shows the domain is registered via SIA AmberBit, a Latvian registrar, suggesting a legitimate registration but no further business details are available. The lack of any metadata, content, or contact information severely limits the ability to assess the business or its market position. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS information is available, indicating a minimal security posture. Overall, the site is not currently serving any meaningful business or user-facing purpose, resulting in a low trust and credibility score.

V

Vivax Communication Group

vcgworld.com

46

VCG (Vivax Communication Group) is a Latvia-based branding and digital solutions agency established in 2008. The company offers a broad range of creative services including corporate identity, web development, naming, strategy, editorial, photography, packaging, and wayfinding. Their clientele includes banks, real estate firms, restaurants, and technology companies primarily in Latvia and the Baltic region. The website presents a professional portfolio showcasing diverse projects, indicating a solid market position as a regional creative agency. Technically, the website employs standard web technologies such as Google Analytics, Typekit fonts, jQuery, and Google Maps API. The site is served over HTTPS, but lacks advanced security headers and DNSSEC, which are areas for improvement. Performance and mobile optimization are moderate, with basic accessibility and SEO features. Tracking is moderate via Google Analytics without visible cookie consent mechanisms or privacy policies, indicating privacy compliance gaps. From a security perspective, the site has a basic security posture with HTTPS enabled but no visible security policies, incident response contacts, or vulnerability disclosure mechanisms. The WHOIS data is consistent and indicates a legitimate domain with a long registration history. However, the absence of DNSSEC and security headers reduces the overall security maturity. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security configurations, and clearer user consent mechanisms to strengthen trust and regulatory adherence.

I

Institut za evropske studije

ies.rs

28

Institut za evropske studije (IES) is a Serbian academic research institute specializing in European studies, international relations, and political science. The website presents a well-structured platform showcasing research publications, conferences, and academic activities targeting scholars, students, and policy makers. The business model is non-profit and focused on knowledge dissemination and academic collaboration. The domain is well-established since 2010, consistent with the organization's profile. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and social media widgets. The site is moderately optimized for performance and mobile devices, with basic accessibility features. However, SEO and privacy compliance are limited, with no privacy or cookie policies detected. The site uses HTTPS but lacks advanced security headers and DNSSEC. From a security perspective, the site shows a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal security policies reduces the overall security posture. There is no incident response or vulnerability disclosure information available, which could be improved to enhance trust. Overall, the website is a credible academic platform with good content and user experience but requires improvements in privacy compliance, security best practices, and transparency to meet modern standards and regulations.

The website casalova.ca is currently inaccessible due to a DNS resolution error as indicated by the Cloudflare error page. The domain is very recently registered (September 2024) and uses privacy protection for registrant details. No actual website content, business information, or contact details are available for analysis. The technical infrastructure relies on Cloudflare and Google Cloud DNS, but the DNS configuration appears incomplete or misconfigured, preventing access to the site. Security posture is weak with no security headers or DNSSEC enabled, and no privacy or cookie policies are present. Overall, the site is not operational and lacks any visible trust or compliance indicators.