parfemy-elnino.cz

.cz crawl

First seen 2026-05-22 · Last seen 2026-05-30 · ok HTTP/1.1 200 1910 ms crawled 2026-05-28

CZ · 85.132.152.185 · AS24641 FASTER CZ spol. s r.o.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: ELNINO.CZ | Parfémy u Vás do 24 hodin
Description: ELNINO.CZ® – nakupte parfémy a kosmetiku za nejlepší ceny, více než 1 milion položek skladem, 21 let na trhu v ČR, statisíce spokojených zákazníků!
Language: cs
Canonical: https://www.parfemy-elnino.cz/

Open Graph

url: https://www.parfemy-elnino.cz/
title: ELNINO.CZ | Parfémy u Vás do 24 hodin

Technology

Server: BunnyCDN-DE1-1331

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
cdnjs.cloudflare.com×1
fonts.gstatic.com×1

Social

Contact

Email

Phone

+420491204255

Registration

Registrar

REG-ACTIVE24

Created

2004-07-20

Expires

2026-07-19 48 days left

Updated

2021-05-31

Name servers

ns-1374.awsdns-43.org
ns-1911.awsdns-46.co.uk
ns-390.awsdns-48.com
ns-700.awsdns-23.net

DNS records live

NS

ns-1374.awsdns-43.org
ns-1911.awsdns-46.co.uk
ns-390.awsdns-48.com
ns-700.awsdns-23.net

MX

10 mx3.elsvc.net
20 mx2.elsvc.net

Verified for

Google

Email authentication partial

SPF

v=spf1 include:spf1.elsvc.net include:spf.mailing.praguebest.cz ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:postmaster@incosrv.com; rf=afrf; pct=100; ri=86400

policy: none (monitoring only)

DKIM

mail: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCqgYoo73zG1CyB5bByM9cgkCewkHm8x11zVV7zILHs+Ej8skFCG4RmMt7Vjze82m9VHQglYnIoWTjJwljF1Yd…

selectors probed

Certificate (current)

R12

from 2026-05-21 to 2026-08-19

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.parfemy-elnino.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: data: blob: ws: wss: 'unsafe-inline' 'unsafe-eval'
strict-transport-security: max-age=31536000; includeSubDomains