axima.cz

.cz crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 408 ms crawled 2026-06-01

CZ · 93.185.98.122 · AS43541 VSHosting s.r.o.

Reputation 92/100 no dmarc policy

sector b2b services type homepage

HTML metadata

Title: Elektrotechnika a průmyslová automatizace | AXIMA Centrála
Description: Vývoj a výroba napájecích zdrojů a systémů nabíječů baterií, elektrotechnický velkoobchod s komponenty pro průmyslovou automatizaci, procesní automatizace. Unikární spojení na českém trhu.
Language: cs

Technology

Server: nginx

Fonts

Adobe Fonts

Third-party hosts loaded (1)

use.typekit.net×1

Social

DNS records live

NS

ns1.websupport.cz
ns2.websupport.cz
ns3.websupport.eu

MX

5 axima-cz.mail.protection.outlook.com

TXT

include:spf-de.emailsignatures365.com
MS=3BC5C7B5392E593301021D7EE51E700F3F6D0338

Verified for

Atlassian

Email authentication weak

SPF: v=spf1 ip4:194.108.199.2 include:spf.protection.outlook.com include:_spf.vshosting.cloud ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GeoTrust EV RSA CA G2

from 2025-06-17 to 2026-07-17

Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.axima.cz/cs

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' www.google-analytics.com www.google.com *.youtube.com https://*.typekit.net blob:; style-src 'self' 'unsafe-inline' *.googleapis.com *.typekit.net; script-src 'self' 'nonce-rHz02TtEEemXvPq3c/D7DA==' *.google.com *.googleapis.com www.google-analytics.com *.typekit.net *.errorception.com *.gstatic.com *.smartlook.com *.smartlook.cloud; font-src 'self' data: *.gstatic.com *.typekit.net; img-src 'self' data: *.youtube.com *.google.com *.google.cz *.google.de *.gstatic.com *.googleapis.com *.typekit.net *.facebook.com *.doubleclick.net data: blob: www.google-analytics.com; connect-src 'self' https://*.typekit.net *.webspire.eu *.ws.io *.axima-obchod.cz *.axima-obchod.sk *.facebook.com *.google-analytics.com *.errorception.com *.doubleclick.net *.googleapis.com *.smartlook.com *.smartlook.cloud; object-src 'self'; media-src 'self' blob:; report-uri https://inspire.report-uri.com/r/d/csp/enforce;
strict-transport-security: max-age=31536000