elkov.cz

.cz crawl

First seen 2026-05-28 · Last seen 2026-05-30 · ok HTTP/1.1 200 1533 ms crawled 2026-05-30

CZ · 194.145.180.151 · AS24971 MasterDC s.r.o.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Elektromateriál a svítidla | ELKOV
Description: Nabízíme přes 30 000 prodůktů elektrotechnického vybavení a svítidel. Pro firmy a kutily.
Language: cs

Open Graph

url: https://www.elkov.cz/
title: Elektromateriál a svítidla | ELKOV
site name: Elkov elektro a.s.
description: Nabízíme přes 30 000 prodůktů elektrotechnického vybavení a svítidel. Pro firmy a kutily.

Technology

CDN: Azure Front Door
JS framework: Vue

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Fonts

Adobe Fonts

Third-party hosts loaded (4)

consent.cookiebot.com×1
use.typekit.net×1
widget.molin.ai×1
www.googletagmanager.com×1

Social

Registration

Registrar

REG-WEBGLOBE

Created

1999-09-08

Expires

2031-09-07 1924 days left

Updated

2023-02-06

Name servers

ns1.ignum.com
ns2.ignum.cz

DNS records live

NS

ns1.ignum.com
ns2.ignum.cz

MX

10 mail.elkov.cz

Verified for

Atlassian
Google
Google Workspace
Microsoft 365

Email authentication partial

SPF: v=spf1 a mx a:maildc2.mywac.cz a:dc5.mywac.cz a:gateway1g.dhl.com include:sparkpostmail.com include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:4qdr44uv3o@dmarc-reports.ecomailapp.com; fo=1
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-27 to 2026-07-26

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.elkov.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: accelerometer=(), autoplay=(), camera=self, display-capture=(), encrypted-media=(), fullscreen=(), geolocation=self, gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; block-all-mixed-content; default-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com; style-src https: 'unsafe-inline'; font-src https:; connect-src https: wss://molin.ai; img-src data: https:; frame-src https:; manifest-src 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-site