varnsdorf.cz

.cz crawl

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 1121 ms crawled 2026-05-30

CZ · 81.2.216.230 · AS24806 INTERNET CZ, a.s.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Úvod - Město Varnsdorf

Language

cs-CZ

Generator

WebJET CMS

Canonical

https://www.varnsdorf.cz/cz/

Feeds

Vesmír » RSS zdroj RSS

Open Graph

url: https://www.varnsdorf.cz/cz/
title: Úvod
locale: cs-CZ
site name: Město Varnsdorf

Technology

Server: nginx
CMS: Joomla
Stack: Java

Third-party hosts loaded (1)

platform-api.sharethis.com×1

Social

Contact

Phone

417 545 111

DNS records live

NS

dexter.ns.cloudflare.com
kiki.ns.cloudflare.com

MX

5 varnsdorf-cz.mail.protection.outlook.com

TXT

kbgd1g6bglfzvwbfgxyfdwq1s5r7ftnw
MS=70F7568A108EB55193F8FAA05350A247E8DB1543

Verified for

Google
Microsoft 365

Email authentication weak

SPF

v=spf1 a a:wj-app1.webactive.cz ip4:185.25.184.226 ip4:86.63.207.128 ip4:80.188.121.42 ip4:80.188.53.2 include:spf.protection.outlook.com -all

strict (-all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgLsgXW2dXmwDH99L/gdTcXccO8tFKGfjd0EZF0N+qVbe6heAi+eeadXQfqjJ8mUK+IRhiM4Ovlmciv85IZj…

selectors probed

Certificate (current)

R13

from 2026-04-02 to 2026-07-01

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.varnsdorf.cz/cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; worker-src https: blob:; child-src https: blob:; style-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src https: data: 'unsafe-inline'; font-src https:; object-src 'self'; base-uri 'none'; frame-ancestors 'self'; connect-src blob: 'self' *.addthis.com pixabay.com maps.googleapis.com www.google-analytics.com l.sharethis.com stats.g.doubleclick.net region1.google-analytics.com docs.webjetcms.sk; frame-src 'self' www.varnsdorf.cz *.youtube.com *.vimeo.com www.google.com docs.google.com *.issuu.com *.addthis.com frame.mapy.cz; manifest-src 'self'
strict-transport-security: max-age=31536000; includeSubDomains