Skip to main content

Is epdmshop.lv a Scam? Security Check Results - EPDM Shop SIA Reviews

epdmshop.lv favicon

Is epdmshop.lv Safe? Security Analysis for EPDM Shop SIA

Check if epdmshop.lv is a scam or legitimate. Free security scan and reviews.

ManufacturingLatviasmall
jQueryBootstrapFont AwesomeGoogle FontsSlider Revolution+1 more
Analyzed 7/30/2025Completed 10:36:24 PM
39
Security Score
HIGH RISK

AI Summary

EPDM Shop SIA is a Latvian-based company specializing in the supply of EPDM membranes and roofing solutions primarily for industrial and commercial applications. The company leverages well-known brands such as Firestone and Elevate to provide high-quality waterproofing and roofing membranes. Their website targets construction professionals, developers, and contractors seeking durable roofing materials. The business operates as a small regional supplier with a focus on B2B relationships. Technically, the website employs a traditional web stack including jQuery, Bootstrap, and Slider Revolution for UI components. While the site is mobile-optimized and presents content clearly, there are some technical gaps such as an empty Google Maps API key and lack of visible security headers. No CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers were detected in the HTML content. The presence of a cookie consent banner indicates GDPR awareness and compliance efforts. However, the absence of WHOIS data due to query limits limits domain legitimacy verification. No forms collecting sensitive data were found, reducing immediate risk exposure. Overall, the website presents a professional and trustworthy front for a small manufacturing and supply business in Latvia. Security posture is average with room for improvement in headers and API key management. Privacy compliance is good with clear cookie consent. The lack of WHOIS data is a limitation but does not strongly detract from the business credibility based on website content and contact information.

Detected Technologies

jQueryBootstrapFont AwesomeGoogle FontsSlider RevolutionGoogle Maps API (key missing)

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

EPDM Shop SIA operates in the manufacturing and construction supply sector, focusing on EPDM roofing membranes and waterproofing solutions. Their market positioning is regional within Latvia, leveraging international brands to enhance credibility. The business model is B2B, serving contractors and developers. The website content and contact details suggest a small-sized company with a stable presence. There is evidence of participation in industry exhibitions and a focus on quality and durability. The company maintains a Facebook presence but limited digital marketing or analytics tools are detected, indicating a modest digital maturity level. No evident partnerships or subsidiaries were identified beyond a mention of a construction exhibition partner site.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

i*****@epdmshop.lv

Phone Numbers (1)

+3712466****

Security Posture Analysis

Comprehensive Security Assessment

The security maturity of the website is moderate. HTTPS is presumably enabled, but no security headers such as Content-Security-Policy or X-Frame-Options were found in the HTML content. The site implements a cookie consent mechanism consistent with GDPR requirements. There is no visible incident response or vulnerability disclosure information. The Google Maps API key is missing, which could lead to broken map functionality. The site disables right-click and text selection to prevent content copying, which may impact usability and accessibility. No analytics or tracking scripts were detected, reducing privacy risks but also limiting user behavior insights. Overall, the site is functional but could benefit from enhanced security headers, proper API key management, and improved transparency on security policies.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement and enforce HTTPS with HSTS to ensure secure connections.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

EPDM Shop SIA

Description:

EPDM Shop SIA specializes in supplying EPDM membranes and related roofing and waterproofing solutions, focusing on industrial and commercial roofing applications. They offer products such as RubberGard EPDM membranes and UltraPly TPO, targeting construction and building sectors.

Key Services:
Supply of EPDM membranes for commercial and industrial roofsWaterproofing solutions for terraces and balconiesMetal roof repair solutionsModular building roofing
Content Quality:

good

Branding:

moderate

Technical Stack

Technologies:
jQueryBootstrapFont AwesomeGoogle FontsSlider RevolutionGoogle Maps API (key missing)
Frameworks:
Bootstrap
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
50/100
Best Practices:
  • Cookie consent banner with explicit acceptance
  • Disabling right-click, drag, and select to prevent content copying

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:good

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is fully accessible with rich content in Latvian language.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

50/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

28/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 ip4:109.106.250.1 include:relay.mailchannels.net a mx ip4:151.106.103.151 ~all

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100
Score

Unable to retrieve SSL certificate

CRITICAL

Could not establish secure connection to retrieve certificate information

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:109.106.250.26
Name Servers:
ns1.hostingmpg.comDNS only
ns2.hostingmpg.comDNS only
MX Records:
10: ALT4.ASPMX.L.GOOGLE.COM
5: ALT1.ASPMX.L.GOOGLE.COM
5: ALT2.ASPMX.L.GOOGLE.COM
10: ALT3.ASPMX.L.GOOGLE.COM
1: ASPMX.L.GOOGLE.COM

DNSSEC Status

DNSSEC Not Enabled

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a classic front-end stack with jQuery, Bootstrap, Font Awesome, and Slider Revolution for interactive UI elements. Google Fonts are loaded externally. The site is mobile responsive and has a clear navigation structure. However, the Google Maps API key is missing, which may cause map display issues. No CMS or backend platform is identified from the HTML. Performance appears moderate with multiple JavaScript libraries loaded. Accessibility is basic, with some usability restrictions due to disabled text selection and right-click. SEO is basic with meta description and title tags present but no structured data or JSON-LD found. No analytics or tracking scripts were detected, indicating minimal user tracking.
Analyze Another Website