Skip to main content

Is kurzemescmas.lv a Scam? Security Check Results - Dimedium Latvija Reviews

kurzemescmas.lv favicon

Is kurzemescmas.lv Safe? Security Analysis for Dimedium Latvija

Check if kurzemescmas.lv is a scam or legitimate. Free security scan and reviews.

ManufacturingLatviamedium
jQueryAlpine.jsLivewireGoogle Tag ManagerGoogle reCAPTCHA+4 more
Analyzed 7/30/2025Completed 10:42:50 PM
43
Security Score
HIGH RISK

AI Summary

Dimedium Latvija is a medium-sized company operating in the veterinary and agricultural sectors in Latvia, offering a broad portfolio of products including veterinary medicines, animal feed, hygiene products, genetic materials, and farm equipment. The company positions itself as a bridge between global best practices and local Latvian farms and veterinary clinics, emphasizing animal health and sustainable local food production. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the website employs modern web technologies such as Laravel Livewire, Alpine.js, jQuery, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized with good navigation and content quality, although some security headers are not explicitly detected. Privacy and cookie policies are present and GDPR compliant, with a functional consent mechanism. Security posture is generally good with HTTPS enforced and anti-bot measures in place, but could be improved by adding standard security headers and publishing explicit security and incident response policies. No critical vulnerabilities or exposed sensitive data were found in the analyzed content. WHOIS data was unavailable due to query limits, limiting domain legitimacy verification, but the website content and business information suggest a legitimate and established regional business. Overall, the site demonstrates a solid digital presence with room for security enhancements and improved SEO metadata completeness. The business is credible and well-positioned in its market niche, serving veterinary and agricultural customers in Latvia and the Baltic region.

Detected Technologies

jQueryAlpine.jsLivewireGoogle Tag ManagerGoogle reCAPTCHASlick CarouselMoment.jsDaterangepickerLightGallery

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Dimedium Latvija operates as part of the Dimedium Group, serving the Baltic region with veterinary and agricultural products. Its competitive advantage lies in offering a comprehensive product range that covers veterinary medicines, animal nutrition, hygiene, genetics, and farm technology. The business model targets both B2B clients such as veterinary clinics and farms, and B2C customers including pet owners. Revenue streams likely include product sales and specialized genetic materials. The company maintains a partnership ecosystem with sister companies in Estonia, Lithuania, and Latvia, enhancing regional market coverage. Growth indicators include active social media engagement, regular news updates, and a visible commitment to local agriculture and animal health. Strategic observations suggest a focus on innovation, customer service, and sustainable farming practices.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

i*****@dimedium.lv

Phone Numbers (2)

+3716761****
+3718070****

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate to good security maturity level. HTTPS is enforced, and Google reCAPTCHA v3 is implemented to mitigate automated abuse. Cookie consent mechanisms align with GDPR requirements, indicating compliance awareness. However, the absence of explicit security headers such as Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and X-Frame-Options reduces the overall security posture. No visible vulnerabilities or exposed sensitive data were detected in the HTML content. Incident response and security policy information are not publicly available, which could hinder transparency and preparedness. Overall, the security culture appears adequate but would benefit from formalized policies and enhanced technical controls.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement standard security headers including CSP, HSTS, X-Frame-Options, and X-Content-Type-Options to strengthen browser security.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Dimedium Latvija

Description:

Dimedium Latvija is a company providing a wide range of products for agriculture and veterinary sectors in Latvia, including veterinary medicines, animal feed, hygiene products, farm equipment, and genetic materials. They serve veterinary clinics, farms, and households with a focus on local healthy food production and animal health.

Key Services:
Veterinary medicinesAnimal feed and supplementsFarm hygiene and care productsGenetic materials (bulls, boars)Agricultural equipment and software
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQueryAlpine.jsLivewireGoogle Tag ManagerGoogle reCAPTCHASlick CarouselMoment.jsDaterangepickerLightGallery
Frameworks:
Laravel Livewire
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
75/100
Best Practices:
  • HTTPS enforced
  • Google reCAPTCHA v3 implemented
  • Cookie consent mechanism with GDPR compliance

Analytics & Tracking

Services:
Google Analytics (via GTM)
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Tracking Pixels:
Google Analytics (implied by GTM)
Marketing Tools:
Facebook social media integration
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is fully accessible with rich content and navigation.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

20/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

25/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Facebook, YouTube, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: energy, transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

62/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 62 days

Mixed Content Detected

MEDIUM

3 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.2TLSv1.3TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:217.146.69.9
Name Servers:
ns1.dns.lvDNS only
ns2.dns.lvDNS only
SOA:Serial: 1741104301, TTL: 900s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:105ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

20/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a modern technology stack centered around Laravel Livewire for reactive components, Alpine.js for frontend interactivity, and jQuery for legacy support. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. UI components leverage Slick Carousel and LightGallery for media presentation. The site loads external fonts from Google Fonts and uses CDN-hosted libraries for performance. The HTML structure is well-formed with responsive design considerations. Performance is moderate, with potential improvements in caching and asset optimization. No CMS is explicitly detected, suggesting a custom or framework-based implementation. Hosting provider details are not disclosed. Technical risks include missing security headers and potential dependency vulnerabilities if not regularly updated.
Analyze Another Website