strevlik.cz

HTML metadata

Title: STŘEVLIK Středisko ekologické výchovy Libereckého kraje | STŘEVLIK
Description: STŘEVLIK Ekologická výchova v Jizerských horách
Language: cs

Open Graph

url: https://strevlik.cz//
title: STŘEVLIK Středisko ekologické výchovy Libereckého kraje
site name: STŘEVLIK
description: STŘEVLIK Ekologická výchova v Jizerských horách

Technology

Server: nginx
Stack: PHP

Third-party hosts loaded (1)

montyit.cz×1

Social

Contact

Email

Phone

Registration

Registrar

REG-WEBGLOBE

Created

2005-08-29

Expires

2027-08-28 449 days left

Updated

2022-12-30

Name servers

ns1.ignum.com
ns2.ignum.cz

DNS records live

NS

ns1.ignum.com
ns2.ignum.cz

MX

10 email.webglobe.cz
10 email2.webglobe.cz
10 email3.webglobe.cz
10 email4.webglobe.cz

Verified for

Google

Email authentication partial

SPF

v=spf1 a mx ip4:95.85.233.3 include:_spf.google.com include:_spf.webglobe.cz ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQT+9gzdTvgObHvgy0fNu8+KyaKNJGKoHpnBMOZtOx/pm9UqzKx6qnZcQQt81Vc+3vQvlSIyXxFPzm…

selectors probed

Certificate (current)

E8

from 2026-05-24 to 2026-08-22

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://strevlik.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.googleapis.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.hotjar.com/ https://*.google-analytics.com/ https://*.doubleclick.net/ https://montyit.cz/ wss://*.hotjar.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.hotjar.com/ https://*.google-analytics.com/ https://*.doubleclick.net/ https://montyit.cz/ wss://*.hotjar.com/; connect-src 'self' https://*.googleapis.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.hotjar.com/ https://*.google-analytics.com/ https://*.doubleclick.net/ https://montyit.cz/ wss://*.hotjar.com/; img-src 'self' blob: 'unsafe-inline' https://*.googleapis.com/ https://*.google.com/ https://*.youtube.c
strict-transport-security: max-age=60; includeSubDomains