Skip to main content

Is tonersyp.cz a Scam? Security Check Results - Tonersyp Reviews

tonersyp.cz favicon

Is tonersyp.cz Safe? Security Analysis for Tonersyp

Check if tonersyp.cz is a scam or legitimate. Free security scan and reviews.

RetailCzech Republicsmall
Google Tag ManagerGoogle AnalyticsHeureka widgetCloudfront CDNFlatpickr datepicker+1 more
Analyzed 8/1/2025Completed 1:02:59 AM
63
Security Score
MEDIUM RISK

AI Summary

Tonersyp is a Czech Republic-based e-commerce retailer specializing in printer supplies such as toners, cartridges, and related consumables. The website targets both consumers and businesses seeking affordable and reliable printer products, offering benefits like next-day delivery and lifetime warranty. The company positions itself as a trusted supplier with a focus on customer service and product availability. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and third-party widgets for enhanced user experience and marketing. The site is mobile-optimized and features a professional design with clear navigation. Security-wise, HTTPS is enforced, but explicit security headers are not detected, and no public security policies or incident response contacts are available. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site demonstrates a moderate to good security posture and compliance with privacy regulations such as GDPR.

Detected Technologies

Google Tag ManagerGoogle AnalyticsHeureka widgetCloudfront CDNFlatpickr datepickerjQuery (implied by widget usage)

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The business operates in the retail sector, focusing on printer consumables in the Czech market. It leverages an e-commerce model with direct sales through its website. The company benefits from a clear market niche, offering specialized products and customer support. Its partnership with Heureka.cz indicates integration with local price comparison and review platforms, enhancing market reach. The presence of multiple printer brand categories suggests a broad product portfolio. The business model relies on repeat customers and volume sales, supported by features like order repetition and customer accounts. Growth potential exists through expanding product lines and improving digital marketing. No parent or subsidiary companies are identified. The company maintains a professional online presence with trust signals such as warranties and customer reviews.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

i*****@tonersyp.cz

Phone Numbers (1)

+4207782*****

Security Posture Analysis

Comprehensive Security Assessment

The website uses HTTPS and integrates standard marketing and analytics scripts securely. However, the lack of visible security headers such as Content-Security-Policy or X-Frame-Options is a gap. No evidence of exposed sensitive data or vulnerable libraries was found in the provided content. Forms include GDPR consent checkboxes, indicating attention to data protection. The absence of a public security policy or incident response contact limits transparency. No vulnerability disclosure or security.txt files were detected. Overall, the security posture is moderate but could be improved by implementing additional HTTP security headers, publishing security policies, and establishing clear incident response channels.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement and enforce HTTP security headers including Content-Security-Policy, X-Frame-Options, and X-XSS-Protection.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Tonersyp

Description:

Náplně a tonery do tiskáren | U vás do druhého dne | Výhodnější ceny pro stálé zákazníky | Snadné objednání | Doživotní záruka

Key Services:
Sale of tonersSale of cartridgesSale of printer consumablesCustomer support and advice
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Google Tag ManagerGoogle AnalyticsHeureka widgetCloudfront CDNFlatpickr datepickerjQuery (implied by widget usage)
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
75/100
Best Practices:
  • HTTPS enforced (implied by https URLs)
  • Use of Google Tag Manager for controlled script loading

Analytics & Tracking

Services:
Google AnalyticsGoogle Tag Manager
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Ad Networks:
Google AdsDoubleClick
Tracking Pixels:
Heureka widget
Transparency Level:good

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is fully accessible with no blocking or WAF challenge.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

55/100
Score

Weak Strict-Transport-Security configuration

LOW

Current value: "max-age=3600"

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Weak Referrer-Policy configuration

LOW

Current value: "no-referrer-when-downgrade"

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

40/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Facebook, YouTube, Google APIs, Google Ads

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport, banking, digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

80/100
Score

No DMARC reporting

LOW

DMARC aggregate reports not configured

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 a mx include:_spf.webglobe.cz include:sparkpostmail.com -all
DNS Lookups:4/10
Policy:-all
DKIM Selectors Found
Selector:default(1296-bit rsa)
DMARC Details
Policy:quarantine

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

65/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 52 days

Weak SSL Key Length

HIGH

SSL certificate uses 384-bit key, which is considered weak

Mixed Content Detected

MEDIUM

1 resources loaded over insecure HTTP

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:www.tonersyp.cz
Issuer:E6
Valid Until:9/23/2025 (52 days)
SANs:tonersyp.cz, tonersyp.sk, www.tonersyp.cz +1 more

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

Domain Age
13 years(mature)

DNS Records

A Records:37.46.210.95
AAAA Records:2a00:19a0:3:d2:0:252e:d25f:1
Name Servers:
ns1.webglobe.czDNS only
ns2.webglobe.czDNS only
ns3.webglobe.com
MX Records:
10: email.webglobe.cz
10: email2.webglobe.cz
10: email3.webglobe.cz
10: email4.webglobe.cz
SOA:Serial: 2025072801, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:106ms

SPF Analysis

SPF Record:
v=spf1 a mx include:_spf.webglobe.cz include:sparkpostmail.com -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a modern tech stack with Google Tag Manager and Analytics for tracking, and Heureka widgets for e-commerce integration. It loads fonts from Google Fonts and uses Cloudfront CDN for widget delivery, indicating a distributed hosting approach. The site is mobile responsive and uses accessible form controls with validation. Performance appears moderate with asynchronous script loading. No CMS was explicitly detected, suggesting a custom or proprietary platform. Technical debt is minimal based on the provided snapshot, but the absence of security headers and incomplete WHOIS data represent risks. Opportunities exist to improve SEO and accessibility further by adding ARIA roles and enhancing semantic HTML.
Analyze Another Website