cevak.cz

HTML metadata

Title: ČEVAK a.s.
Description: Společnost ČEVAK je vodárenská společnost zabývající se provozováním vodohospodářské infrastruktury.
Language: cs

Open Graph

url: https://www.cevak.cz/cs
title: Společnost ČEVAK je vodárenská společnost.
site name: ČEVAK a.s.
description: Společnost ČEVAK je vodárenská společnost zabývající se provozováním vodohospodářské infrastruktury.

Technology

Server: xxxxxx

Analytics

Google Tag Manager

Third-party hosts loaded (2)

maps.googleapis.com×1
www.googletagmanager.com×1

Social

Contact

Email

prodejvody@cevak.cz

DNS records live

NS

clark.ns.cloudflare.com
ullis.ns.cloudflare.com

MX

0 cevak-cz.mail.protection.outlook.com

TXT

uklYiuAYnNN3V9kJVNz6N3VqubzeDtOVr0JFcjF0AghEtjNQ7Sp23Low1vmSYI+uK87PePwgJMsjbo72IhOR4g==
5vmMWWTEeS2lJfNEuJHszQIfv6q7gQuBKwDwJXZkQmSO6V6HG+drnqpcOrEZkY/TVjOlV9XLT98p46AcAAwsVg==
8dRXkP0neoqz/mDhyo3fk3dHBcivGJAb+fq4zPtOtqUMGopSfXumvztcnrGKc0LEFx1zLKQQfAtwxjk35XVctg==

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 mx a:cortex.cevak.cz include:spf.vodacr.cz include:Spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaJybEBXDleFAzymv7NqO83ZXrfANM9FryAiMiMm8vSalDSPcuxgKuZlZSQBsNrCs5i9gGQq1pd2J7…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIj0PqKB7oC2Ih98X08nLX5eOElII5ddcwCFFtCe2zyJiLdK2QhmnLUgXZAXONOasQJOgNO3puKmgi…

selectors probed

Certificate (current)

E8

from 2026-04-22 to 2026-07-21

Expires in 51 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.cevak.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), fullscreen=(self "https://www.youtube.com"), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self';font-src 'self' data: fonts.gstatic.com;connect-src 'self' *.google.com *.googleapis.com www.google-analytics.com *.doubleclick.net *.google-analytics.com *.clarity.ms;script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com maps.google.com *.googleapis.com www.google.com *.gstatic.com *.clarity.ms;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com maps.google.com *.googleapis.com www.google.com *.gstatic.com *.clarity.ms;form-action 'self';frame-src 'self' www.youtube.com *.google.com;worker-src 'self' www.youtube.com *.google.com;frame-ancestors 'self' *.google.com;img-src 'self' data: www.googletagmanager.com www.google-analytics.com *.doubleclick.net *.gstatic.com maps.google.com *.googleapis.com www.google.com www.google.cz *.clarity.ms *.bing.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googletagmanager.com;object-src 'self'
strict-transport-security: max-age=31536000