Skip to main content

Is sapfira.lv a Scam? Security Check Results - SAPFIRA SIA Reviews

sapfira.lv favicon

Is sapfira.lv Safe? Security Analysis for SAPFIRA SIA

Check if sapfira.lv is a scam or legitimate. Free security scan and reviews.

TransportationLatviasmall
jQuery 3.5.1FontAwesome 5.8.2Google Fonts (Rubik)Inputmask.jselizings.org scripts and styles
Analyzed 7/30/2025Completed 8:54:43 PM
34
Security Score
HIGH RISK

AI Summary

SAPFIRA SIA operates the website sapfira.lv, a Latvian used car dealership based in Daugavpils. The company offers used car sales, leasing, trade-in services, and imports vehicles from Europe, particularly Germany. The website targets Latvian consumers interested in affordable used cars with flexible financing options. The business model focuses on direct sales combined with leasing and trade-in to facilitate vehicle acquisition. The company appears to be a small local player with a clear market niche in the Latvian automotive retail sector. Technically, the website uses common web technologies such as jQuery, FontAwesome, and Google Fonts, with additional scripts from elizings.org for marketing and form handling. The site is moderately optimized for performance and mobile devices, with basic accessibility features. SEO is adequately addressed through meta tags and Open Graph data. However, no CMS or hosting provider details are evident, and some modern security headers are missing. From a security perspective, the site uses HTTPS as implied by Open Graph URLs, but no explicit security headers like CSP or HSTS were detected in the provided data. The privacy and cookie policies are comprehensive and GDPR-compliant, including explicit marketing consent mechanisms. No incident response or vulnerability disclosure information is present. The site does not appear to be behind a WAF or security challenge, and no critical vulnerabilities were identified in the analysis. Overall, the website presents a professional and trustworthy front for a small Latvian used car dealership. The lack of WHOIS data limits domain trust analysis, but the visible business information and policies support legitimacy. Security posture is moderate with room for improvement in headers and monitoring. Recommendations include enhancing security headers, verifying SSL configuration, and improving mobile and accessibility features to strengthen user trust and compliance.

Detected Technologies

jQuery 3.5.1FontAwesome 5.8.2Google Fonts (Rubik)Inputmask.jselizings.org scripts and styles

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

SAPFIRA SIA is positioned as a local used car dealer in Latvia, focusing on the Daugavpils region. Their competitive advantage lies in offering European-imported vehicles with verified history and warranty, combined with leasing and trade-in options to attract a broader customer base. Revenue streams likely include direct car sales, leasing commissions, and trade-in facilitation. The target customers are individuals seeking affordable used cars with financing flexibility. The company collaborates with partners such as motorfy.lv and elizings.lv, indicating a networked approach to marketing and financing solutions. Growth indicators include a regularly updated car catalog and marketing consent mechanisms to engage customers. The business operates in a niche market with moderate competition, leveraging local presence and European sourcing as key differentiators.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

S*****@gmail.com

Phone Numbers (2)

+3712995****
+3712677****

Physical Addresses (1)

Company Registration

Legal Name:

SAPFIRA SIA

Registration Number:

41503087083

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate security maturity level. HTTPS is used, ensuring encrypted communications. Privacy and cookie policies are comprehensive and GDPR-aligned, with explicit user consent for marketing data processing. However, the absence of key security headers such as Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and X-Frame-Options reduces protection against common web attacks. No vulnerability disclosure or incident response information is provided, which limits transparency and preparedness. The use of third-party scripts from elizings.org introduces potential risk vectors that require regular auditing. Overall, the site is functional and reasonably secure for its business scope but would benefit from enhanced security controls and formalized incident response capabilities.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement security headers including CSP, HSTS, and X-Frame-Options to mitigate common web vulnerabilities.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

SAPFIRA SIA

Description:

Autosalons piedāvā - Pasūtīšana un piegāde no Eiropas, Līzings un Maiņa. Lietotas automasīnas - Bez pirmās iemaksas un ar izdevīgiem Līzinga nosacījumiem.

Key Services:
Used car salesCar leasingCar trade-inCar import from Germany
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
jQuery 3.5.1FontAwesome 5.8.2Google Fonts (Rubik)Inputmask.jselizings.org scripts and styles
Performance:

moderate

Mobile:

basic

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
65/100
Best Practices:
  • HTTPS usage implied by og:url
  • No exposed sensitive data in HTML
  • Consent mechanisms for cookies and marketing data

Analytics & Tracking

Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Marketing Tools:
elizings.org scripts
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is fully accessible with no blocking or WAF detected.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

35/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

10/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: YouTube, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100
Score

Unable to retrieve SSL certificate

CRITICAL

Could not establish secure connection to retrieve certificate information

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

DNS Records

A Records:65.21.93.23
Name Servers:
ns1.dns.lvDNS only
ns2.dns.lvDNS only

DNSSEC Status

DNSSEC Not Enabled

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using standard web technologies such as jQuery 3.5.1, FontAwesome 5.8.2, and Google Fonts, supplemented by custom CSS and JavaScript files. The presence of elizings.org scripts indicates integration with external marketing and financing tools. The site lacks a detectable CMS, suggesting a custom or static site architecture. Performance is moderate with some mobile optimization, but the removal of the main video iframe on smaller screens indicates basic responsiveness. SEO is supported by meta tags and Open Graph data, enhancing social sharing. The absence of advanced security headers and unknown hosting provider details suggest potential technical debt and areas for modernization. Overall, the technical infrastructure is adequate for a small business but could be improved for scalability, security, and user experience.
Analyze Another Website