Skip to main content

Is midasweb.eu a Scam? Security Check Results - Midasweb Reviews

midasweb.eu favicon

Is midasweb.eu Safe? Security Analysis for Midasweb

Check if midasweb.eu is a scam or legitimate. Free security scan and reviews.

OtherCzech Republicsmall
HTMLCSSGoogle FontsGoogle Analytics (urchin.js)
Analyzed 7/31/2025Completed 9:32:28 PM
40
Security Score
HIGH RISK

AI Summary

Midasweb is a small Czech Republic-based web design and graphic design service provider, founded in 2007. The company offers services including website creation, SEO, graphic design such as logos and business cards, and e-shop development. The website content is basic but provides clear contact information and company registration details, supporting business legitimacy. Technically, the website uses basic HTML and CSS with Google Fonts and an outdated Google Analytics script. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is poor with no privacy or cookie policies present. Overall, the website is functional but requires significant improvements in security and privacy to meet modern standards.

Detected Technologies

HTMLCSSGoogle FontsGoogle Analytics (urchin.js)

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The company operates in the web and graphic design sector targeting small businesses or individuals needing digital presence and branding services. The business model is service-based with direct client engagement. The market position is that of a small local studio with limited digital maturity. There are no visible partnerships or subsidiaries. Revenue streams likely come from project-based contracts. The website lacks modern marketing and tracking tools beyond basic Google Analytics. Growth indicators and strategic partnerships are not evident from the website content.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

i*****@midasweb.eu

Phone Numbers (1)

+4277569****

Physical Addresses (1)

Company Registration

Legal Name:

Otakar Korolus

VAT Number:

CZ6911092331

Registration Number:

744 12 361

Security Posture Analysis

Comprehensive Security Assessment

The security maturity level is low. The absence of HTTPS is a critical vulnerability exposing users to data interception risks. No security headers or advanced protections are implemented. The website does not provide privacy or cookie policies, indicating non-compliance with GDPR. No incident response or security contact information is available. The use of an outdated analytics script may expose the site to tracking inefficiencies or vulnerabilities. Overall, the security posture requires urgent improvement to protect user data and enhance trust.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement HTTPS with a valid SSL/TLS certificate to secure all website traffic.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Midasweb

Description:

Midasweb provides web design, website creation, graphic design including logos, business cards, and editorial systems with e-shop capabilities.

Key Services:
webdesignwebsite creationgraphic designSEOlogo designbusiness cardscontent management systemse-shop development
Content Quality:

basic

Branding:

moderate

Technical Stack

Technologies:
HTMLCSSGoogle FontsGoogle Analytics (urchin.js)
Performance:

moderate

Mobile:

basic

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
30/100

Analytics & Tracking

Services:
Google Analytics (urchin.js)
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:basic
User Experience:basic
Content Relevance:basic
Navigation Clarity:basic
Professionalism:basic
Trustworthiness:moderate

Key Observations

1

Website is a small local web design and graphic service provider

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

10/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

65/100
Score

No DMARC record found

HIGH

DMARC provides email authentication and reporting

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.seznam.cz ~all
DNS Lookups:1/10
Policy:~all
DMARC Details
Policy:none
MTA-STS Details

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

85/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 60 days

Mixed Content Detected

MEDIUM

2 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:midasweb.eu
Issuer:R10
Valid Until:9/29/2025 (60 days)
SANs:midasweb.cz, midasweb.eu, www.midasweb.cz +1 more

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

DNS Records

A Records:46.36.41.145
AAAA Records:2a02:25b0:aaaa:aaaa:1a4c:a9:6070:0
Name Servers:
ns.forpsi.czDNS only
ns.forpsi.itDNS only
ns.forpsi.netDNS only
MX Records:
10: 648c0916c4ae7821.mx2.emailprofi.seznam.cz
20: 648c0916c4ae7821.mx1.emailprofi.seznam.cz
SOA:Serial: 2025031801, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:93ms

SPF Analysis

SPF Record:
v=spf1 include:spf.seznam.cz ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

0/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

Critical Service Exposed: MySQL

CRITICAL

Port 3306 (MySQL) is publicly accessible - MySQL - Database server

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built with basic HTML and CSS, using Google Fonts for typography. It includes an outdated Google Analytics urchin.js script loaded over HTTP, which is insecure. No CMS or modern frameworks are detected. The site lacks HTTPS, which is a major technical deficiency. Performance is likely moderate given the simple design and minimal external resources. Mobile optimization is basic but present via viewport meta tag. SEO is minimal with basic meta tags but no structured data or Open Graph tags. Accessibility features are limited. The site would benefit from modernization including HTTPS, updated analytics, and improved SEO and accessibility practices.
Analyze Another Website