opava-city.cz

.cz crawl

First seen 2026-05-21 · Last seen 2026-05-31 · ok HTTP/1.1 200 4963 ms crawled 2026-05-27

CZ · 81.2.216.230 · AS24806 INTERNET CZ, a.s.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Hlavní stránka - Statutární město Opava
Language: cs-CZ
Generator: WebJET CMS
Canonical: https://www.opava-city.cz/cz/

Open Graph

url: https://www.opava-city.cz/cz/
title: Hlavní stránka
locale: cs-CZ
site name: Statutární město Opava

Technology

Server: nginx
CMS: Joomla

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

+420 553 756 111

Registration

Registrar

REG-ACTIVE24

Created

1998-05-11

Expires

2029-10-11 1228 days left

Updated

2025-06-15

Name servers

ns1.websupport.cz
ns2.websupport.cz
ns3.websupport.eu

DNS records live

NS

ns1.websupport.cz
ns2.websupport.cz
ns3.websupport.eu

MX

10 smtp02.opava-city.cz
20 smtp03.opava-city.cz
50 smtp.opanet.cz

TXT

Show 4 TXT records

cef5oedtkd1pmnp9l6p2koma6o
MS=B3B91C06C96F2EA8390E94AB75F65FF15CF5C6EE
ppe-e83cc3b350e27c5ab01b5ab31e3f3f4e13cd7fdd
8LqKjLzw5cJAhBahFBDPO9MOehSE5a3piMvopdM2/f7Byss6mSMSdRFRDEQ4eCS6eqG54cn3BHnCr48wJ6F1VQ==

Verified for

Google
Microsoft 365

Email authentication weak

SPF: v=spf1 a mx ip4:81.2.216.230 ip6:2001:15e8:104:4::d8e6 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-02 to 2026-07-01

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.opava-city.cz/cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval' *.disqus.com c.disquscdn.com; worker-src https: blob:; child-src https: blob:; style-src https: data: 'unsafe-inline' 'unsafe-eval' c.disquscdn.com; img-src https: data: 'unsafe-inline' http://*.tile.osm.org; font-src https: data:; object-src blob: 'self'; base-uri 'none'; frame-ancestors 'self' http://127.0.0.1; connect-src blob: 'self' *.openstreetmap.org *.disqus.com *.pixabay.com pixabay.com region1.google-analytics.com maps.googleapis.com www.google-analytics.com stats.g.doubleclick.net; frame-src 'self' www.opava-city.cz *.youtube.com *.vimeo.com docs.google.com disqus.com *.disqus.com *.opava-city.cz e.issuu.com api.mapy.cz www.google.com opava360.panovision.cz *.munipolis.cz; media-src https:
strict-transport-security: max-age=31536000; includeSubDomains