mariuspedersen.cz

.cz crawl

First seen 2026-05-28 · Last seen 2026-05-31 · ok HTTP/1.1 200 1042 ms crawled 2026-05-31

US · 172.66.0.96 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Hlavní stránka | Marius Pedersen a.s.
Language: cs
Generator: Marius Pedersen a.s.

Open Graph

title: Hlavní stránka | Marius Pedersen a.s.
locale: cs
site name: Marius Pedersen a.s.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (2)

www.googletagmanager.com×2
consent.cookiebot.com×1

Social

DNS records live

NS

ns.forpsi.cz
ns.forpsi.it
ns.forpsi.net

MX

10 mail.mariuspedersen.cz

TXT

faWhwD1hV2hUEJN43NgnfqnPrT4BofY8

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 a mx mx:mail.mariuspedersen.cz ip4:91.245.8.6 include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT3ed7w7pIRFy9L0K7ixigTsiK57RvYInN7BG1C5vYmxurLYX7Ex/4UuGsc0MX23rFCCmrK6rxgv/Xlpn3…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cHCAHyNio0Hm6IZVjYVlg3LXu0aXl4JTaVHj/TXd5ubUVxo6RWUpvYpiXuNDxScmHQxIY269kv7KOgJSM…

selectors probed

Certificate (current)

WE1

from 2026-04-01 to 2026-06-30

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.mariuspedersen.cz

present

strict-transport-security
content-security-policy
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(self "https://www.mariuspedersen.cz" "https://mariuspedersen.symbio.agency" "http://localhost:3000"), notifications=(self), push=(self), sync-xhr=(self), speaker=(self), vibrate=(self), fullscreen=(self)
content-security-policy: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval' http://localhost:3000 ws://localhost:3000 http://localhost:1337 ws://localhost:1337 https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.google.com https://www.gstatic.com; frame-ancestors 'self' https://www.mariuspedersen.cz https://mariuspedersen.symbio.agency https://mariuspedersen-prod.symbio.agency https://admin-mp.symbio.agency https://admin-mp-prod.symbio.agency https://admin.mariuspedersen.cz;
strict-transport-security: max-age=31536000; includeSubDomains; preload