Skip to main content

Is seplast.cz a Scam? Security Check Results - SEPLAST, s.r.o. Reviews

seplast.cz favicon

Is seplast.cz Safe? Security Analysis for SEPLAST, s.r.o.

Check if seplast.cz is a scam or legitimate. Free security scan and reviews.

ManufacturingCzech Republicsmall
JavaScriptjQuery (custom implementation)
Analyzed 7/31/2025Completed 3:22:05 AM
49
Security Score
HIGH RISK

AI Summary

SEPLAST, s.r.o. is a Czech Republic-based small manufacturing company specializing in the production and distribution of plastic industrial radial fans. The website presents a professional and focused business profile targeting industrial clients requiring specialized ventilation solutions. The company leverages a WordPress CMS with the Divi theme, indicating a standard and maintainable digital infrastructure. The website is accessible without any blocking or WAF challenges, and it implements HTTPS, ensuring secure communication. However, the absence of WHOIS data and registrant information reduces transparency and trustworthiness from a domain registration perspective. Additionally, the lack of explicit privacy and terms of service policies, as well as missing security headers, indicates areas for compliance and security improvement. Overall, the website is functional and professional but would benefit from enhanced security and compliance documentation.

Detected Technologies

JavaScriptjQuery (custom implementation)

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

SEPLAST operates in the manufacturing sector, focusing on plastic industrial fans, serving a niche industrial market. The business model centers on manufacturing and distribution, targeting industrial clients in need of specialized ventilation products. The website content is relevant and well-structured, supporting the company's market positioning as a specialized manufacturer. No evident partnerships or subsidiaries are identified from the website content. The company appears to maintain a consistent brand presence online, though contact information and certifications are not prominently displayed, which could limit customer trust and engagement.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (2)

h*****@plastika-sv.cz
o*****@plastika-sv.cz

Phone Numbers (1)

+4205733*****

Security Posture Analysis

Comprehensive Security Assessment

The website benefits from HTTPS encryption, which is a fundamental security measure. However, the absence of key security headers such as Content-Security-Policy, X-Frame-Options, and Strict-Transport-Security suggests potential vulnerabilities to common web attacks. No exposed sensitive data or vulnerable libraries were detected in the provided content. The lack of a security.txt file or vulnerability disclosure policy limits the company's readiness to handle security incidents transparently. The cookie consent mechanism indicates some level of privacy compliance, but the absence of a detailed privacy policy and terms of service is a compliance gap. Overall, the security posture is moderate but requires enhancements to align with best practices and regulatory requirements.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish a comprehensive privacy policy and terms of service to improve legal compliance and user trust.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

SEPLAST, s.r.o.

Description:

Společnost SEPLAST, s.r.o. je zaměřena na výrobu a distribuci plastových průmyslových radiálních ventilátorů.

Key Services:
manufacture of plastic industrial radial fansdistribution of industrial fans
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
JavaScriptjQuery (custom implementation)
Frameworks:
Divi Theme
Platforms:
WordPress
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
70/100
Best Practices:
  • HTTPS enabled

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is accessible with full content and no blocking detected.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

25/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: energy, transport, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

80/100
Score

No DMARC record found

HIGH

DMARC provides email authentication and reporting

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 mx a ip4:93.99.152.15 ip4:93.99.152.8 ip4:93.99.152.1 ip4:93.99.152.11 ip4:93.99.152.9 a:mail2.orlovanet.cz a:web.orlovanet.cz a:web2.orlovanet.cz ~all
DNS Lookups:5/10
Policy:~all
DKIM Selectors Found
Selector:default(1432-bit rsa)
DMARC Details
Policy:none
MTA-STS Details

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

95/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 49 days

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:seplast.cz
Issuer:R11
Valid Until:9/18/2025 (49 days)
SANs:seplast.cz, www.seplast.cz

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

Domain Age
19 years(mature)

DNS Records

A Records:93.185.108.159
AAAA Records:2a00:1ed0:46:200::1213:9c
Name Servers:
ns1.jimmynet.czDNS only
ns3.orlovanet.czDNS only
MX Records:
10: mail2.orlovanet.cz
SOA:Serial: 2025072802, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:131ms

SPF Analysis

SPF Record:
v=spf1 mx a ip4:93.99.152.15 ip4:93.99.152.8 ip4:93.99.152.1 ip4:93.99.152.11 ip4:93.99.152.9 a:mail2.orlovanet.cz a:web.orlovanet.cz a:web2.orlovanet.cz ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

20/100
Score

High-Risk Service Exposed: FTP

HIGH

Port 21 (FTP) is publicly accessible - FTP - Often unencrypted file transfer

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on WordPress using the Divi theme, a popular and flexible CMS platform. The technology stack includes JavaScript with a custom jQuery implementation. The site loads external resources such as Google Fonts, indicating standard web practices. Performance is moderate with good mobile optimization and basic accessibility features. SEO optimization is good with proper meta tags and structured data (JSON-LD) describing the organization and website. There is no indication of advanced hosting or CDN providers from the provided data. Technical debt appears low, but improvements in security headers and privacy documentation are recommended to reduce risk.
Analyze Another Website