ivarcs.cz

.cz crawl

First seen 2026-05-28 · Last seen 2026-05-31 · ok HTTP/1.1 200 1089 ms crawled 2026-05-31

CZ · 81.95.110.72 · AS25234 ACTIVE 24, s.r.o.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Hlavní stránka | IVAR CS : komponenty pro vodu, vytápění a plyn
Description: IVAR CS : komponenty pro vodu, vytápění a plyn
Language: cs
Canonical: https://www.ivarcs.cz/

Open Graph

url: https://www.ivarcs.cz/
title: Hlavní stránka
site name: IVAR CS : komponenty pro vodu, vytápění a plyn
description: IVAR CS : komponenty pro vodu, vytápění a plyn

Technology

Server: nginx

Analytics

Google Tag Manager

Ads

Meta Pixel

Third-party hosts loaded (3)

www.googletagmanager.com×2
connect.facebook.net×1
ivarcs.searchready.cz×1

Social

Contact

Email

info@ivarcs.cz

Phone

+420 800 173 965

DNS records live

NS

ns1.regzone.cz
ns1.regzone.de
ns1.regzone.info

MX

10 mail.ivarcs.cz
20 mail2.ivarcs.cz

Verified for

Meta

Email authentication partial

SPF

v=spf1 mx ip4:31.15.13.26 ip4:213.109.164.15 include:spf.active24.com include:sparkpostmail.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:7l7d85gn1d@dmarc-reports.ecomailapp.com; fo=1

policy: none (monitoring only)

DKIM

mail: v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDD37TlJBQw2nyvwA+GAshVVPzzvhHDfCxG9AK3nXoOe9aM5xUcNYLTHd32WX7oXT8FqVzi+Zy5NIEsHu4i0tncKcwVyJ…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-04-13 to 2026-10-29

Expires in 150 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ivarcs.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), battery=(), camera=(), display-capture=(), document-domain=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: script-src 'nonce-jmDU0bghal6rbu4AIyeVnA==' 'strict-dynamic' * 'unsafe-inline'; object-src 'none'; base-uri 'self';
strict-transport-security: max-age=31536000; includeSubDomains