Skip to main content

Is vitalniobchod.cz a Scam? Security Check Results - VITALITY Slezsko, s.r.o. Reviews

vitalniobchod.cz favicon

Is vitalniobchod.cz Safe? Security Analysis for VITALITY Slezsko, s.r.o.

Check if vitalniobchod.cz is a scam or legitimate. Free security scan and reviews.

RetailCzech Republicsmall
WordPress 6.8.2WooCommerce 10.0.4PHPjQueryYoast SEO+8 more
Analyzed 7/31/2025Completed 12:16:03 PM
52
Security Score
MEDIUM RISK

AI Summary

Vitální obchod is a Czech-based small business operating an e-commerce platform specializing in food catering, weekly menus, desserts, and gift vouchers. The company, legally known as VITALITY Slezsko, s.r.o., has been established since 2009 and targets general consumers seeking catering and meal services. The website is built on WordPress with WooCommerce, leveraging modern plugins and marketing integrations such as Google Tag Manager and Facebook Pixel. The site demonstrates good content quality, clear navigation, and consistent branding, positioning it well within its local market segment. Technically, the site uses a robust tech stack with a reputable hosting provider and shows moderate performance and mobile optimization.

Detected Technologies

WordPress 6.8.2WooCommerce 10.0.4PHPjQueryYoast SEOJetpackGoogle Tag ManagerGoogle AdSenseFacebook PixelSalient themeFlickity carouselSelect2Mailchimp for WooCommerce

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The business operates primarily in the retail and hospitality sectors, offering a range of food-related products and services including weekly menus, catering platters, and desserts. Its market position appears regional with a focus on quality and vitality-themed offerings. The company maintains active social media channels on Facebook, Instagram, and YouTube, enhancing customer engagement and brand visibility. Revenue streams are likely driven by online sales and catering orders. The partnership with onlinehosting.cz for hosting and use of WooCommerce for e-commerce indicates a mature digital infrastructure supporting business operations.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

k*****@vitalityslezsko.cz

Phone Numbers (1)

+4207329*****

Security Posture Analysis

Comprehensive Security Assessment

The website enforces HTTPS and uses standard security practices such as asynchronous loading of tracking scripts. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and does not publish a security policy or incident response contact information. No vulnerability disclosure or security.txt file is present. Cookie consent mechanisms are absent, which may pose compliance risks under GDPR. Overall, the security posture is moderate but could be improved by implementing recommended headers, consent banners, and formal security policies.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement a cookie consent banner to comply with GDPR and enhance user privacy transparency.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

VITALITY Slezsko, s.r.o.

Description:

Vše pro Vaši Vitalitu - online shop offering weekly menus, catering, desserts, gift vouchers, and other food products.

Key Services:
Weekly menuCateringKorýtka and raut (food platters and buffets)DessertsGift vouchers
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
WordPress 6.8.2WooCommerce 10.0.4PHPjQueryYoast SEOJetpackGoogle Tag ManagerGoogle AdSenseFacebook PixelSalient themeFlickity carouselSelect2Mailchimp for WooCommerce
Frameworks:
WooCommerceYoast SEO
Platforms:
WordPress
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
70/100
Best Practices:
  • HTTPS enforced
  • No exposed sensitive data in HTML
  • Use of Facebook Pixel and Google Tag Manager scripts loaded asynchronously

Analytics & Tracking

Services:
Google Analytics (via Google Tag Manager)WordPress.com Stats
Tracking Level:moderate
Privacy Compliance:basic

Advertising & Marketing

Ad Networks:
Google AdSense
Tracking Pixels:
Facebook Pixel
Marketing Tools:
Mailchimp for WooCommerce
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is a Czech e-commerce and catering service site with active WooCommerce shop

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

65/100
Score

Weak Strict-Transport-Security configuration

LOW

Current value: "max-age=2592000"

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Weak X-XSS-Protection configuration

LOW

Current value: "1"

Weak Referrer-Policy configuration

LOW

Current value: "origin-when-cross-origin, no-referrer-when-downgrade"

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

10/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Facebook, YouTube, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 a include:_spf.onlinehosting.cz -all
DNS Lookups:2/10
Policy:-all

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100
Score

Unable to retrieve SSL certificate

CRITICAL

Could not establish secure connection to retrieve certificate information

Mixed Content Detected

MEDIUM

1 resources loaded over insecure HTTP

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

75/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Domain Age
16 years(mature)

DNS Records

A Records:81.0.206.52
Name Servers:
ns1.onlinehosting.cz
ns2.onlinehosting.cz
ns3.onlinehosting.cz
MX Records:
10: smtp.onlinehosting.cz
SOA:Serial: 20, TTL: 300s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:119ms

SPF Analysis

SPF Record:
v=spf1 a include:_spf.onlinehosting.cz -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a modern WordPress platform using WooCommerce for e-commerce functionality. It integrates multiple third-party services including Google Tag Manager, Facebook Pixel, and Mailchimp for marketing and analytics. The Salient theme provides a professional design with responsive layouts and interactive elements like carousels. Performance is moderate with room for optimization. The hosting provider is consistent with the domain registration data, indicating a stable infrastructure. Technical debt appears low, but improvements in security headers and privacy compliance are recommended to reduce risks.
Analyze Another Website