originalnitonery.cz

HTML metadata

Title: Originální Tonery.cz - náplně do všech tiskáren!
Description: Máme nejširší výběr náplní do tiskáren na trhu. Originální tonery za nejlepší ceny.
Language: cs
Canonical: https://www.originalnitonery.cz/

Open Graph

URL: https://www.originalnitonery.cz/
title: Originální Tonery.cz - náplně do všech tiskáren!
description: Máme nejširší výběr náplní do tiskáren na trhu. Originální tonery za nejlepší ceny.

Technology

Server: Apache
CMS: Gatsby
jQuery: 1.12.4 known XSS (<3.5)

Analytics

Google Tag Manager

Third-party hosts loaded (2)

is.internetmania.cz×2
www.googletagmanager.com×1

Social

Contact

Email

info@originalnitonery.cz

Phone

732 630 662

Registration

Registrar

REG-INTERNET-CZ

Created

2012-03-18

Expires

2033-03-17 2481 days left

Updated

2020-04-21

Name servers

ns.forpsi.cz
ns.forpsi.it
ns.forpsi.net

DNS records live

NS

ns.forpsi.cz
ns.forpsi.it
ns.forpsi.net

MX

5 mail.truelink.cz

Verified for

Google

Email authentication partial

SPF

v=spf1 ip4:85.163.36.95 ip4:85.163.36.94 ip4:77.48.73.21 ip4:91.121.106.96 include:servers.mcsv.net include:_emailing.heureka.cz include:spf.mandrillapp.com ?all

neutral (?all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
mail: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7itbkrpAZIAWUG3neosNabIuHfAm6Kp7qtQ6HYiAf2mEKBgHh2MEmepUGdOQs1+LLvVFXDO1hITmh…

selectors probed

Certificate (current)

E8

from 2026-04-18 to 2026-07-17

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.originalnitonery.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:;
strict-transport-security: max-age=31536000; includeSubDomains