{
"ok": true,
"domain": "coi.cz",
"generated_at": "2026-08-11T07:21:07-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 92,
"label": "Excellent",
"categories": {
"dns": 95,
"mail": 90,
"security": 84,
"network": 85,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "1 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "1 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "2 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 15,
"lost_points": 0,
"detail": "DS and DNSKEY detected."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "1 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "72 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 19,
"lost_points": 16,
"detail": "5 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "PTR: 79.16.155.104.bc.googleusercontent.com"
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 20,
"lost_points": 15,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/1.1 200 OK"
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "1 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 (AAAA)",
"detail": "1 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "2 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "DNSSEC chain",
"detail": "DS and DNSKEY detected.",
"category": "dns",
"max_points": 15,
"earned_points": 15,
"lost_points": 0
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "1 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "72 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "5 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 19,
"lost_points": 16
},
{
"level": "ok",
"title": "PTR reverse DNS",
"detail": "PTR: 79.16.155.104.bc.googleusercontent.com",
"category": "network",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "warning",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 20,
"lost_points": 15
},
{
"level": "ok",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/1.1 200 OK",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"104.155.16.79"
],
"AAAA": [
"2600:1900:4010:cc4::"
],
"CNAME": [],
"MX": [
"0 coi-cz.o-v1.mx.microsoft."
],
"TXT": [
"\"v=spf1 a mx ip4:213.195.199.180 ip4:213.195.199.179 include:spf.protection.outlook.com -all\"",
"\"3cm65x8m01l90f3y531fn6cdmwknrztf\"",
"\"MS=75DD76990965786EAF6D64424FC315C80B2B1ED1\"",
"\"cb3tqxs6w619gznqdrwfwwp6z4y01p3c\""
],
"NS": [
"ns1.ignum.com.",
"ns2.ignum.cz."
],
"SOA": [
"ns1.ignum.com. hostmaster.ignum.cz. 2026073102 10800 3600 604800 3600"
],
"CAA": [],
"DS": [
"1478 13 2 470201C4952A833A4C2B18D20E7E22FE8BE54CE27677C76EDAD8644E 0E22AE98"
],
"DNSKEY": [
"256 3 13 gB+euHP2bil7a58BF2WaNvSCnRcloJihHEqHTJCLwt9eYMMwPW3CY7yj iBTL5kFVNHWoZMQvaIK8RbY49HEeqQ==",
"257 3 13 iwSBRNKahrDDjqGMErIG6vv59dDkT4Em1maTym1rj3fpFNYrSqu6Bdsz 9GmshtPdFMhfVry8mp22CCQc1X3QBg=="
],
"RRSIG": [
"AAAA 13 2 600 20260929121903 20260731111903 6760 coi.cz. m91kBtntDSqjPv5qHOvnwUNDmnQzD9UOd9uHv2pQhe56i4z/6uq9BAV6 dT6S9jevOPhvU87uqL1/nbKVM0VlyA==",
"NS 13 2 3600 20260929121903 20260731111903 6760 coi.cz. OlleitH+/+dv0zldmdDASouyKtYZ+qW+VrlmEMNf6yuTQ9VSbis/Ecny zXycXs84ocxtUFfePtep6Yy0LTqBdw==",
"A 13 2 600 20260929121903 20260731111903 6760 coi.cz. 1HnQdT7nFTjwQrmhU/5ZNVb6OEvfSXQP3z7lgcVLmIyfnX8ThnJkG0UV vKCjmd/vC4sAg60MbcZf7KKyXM3Zgw==",
"DS 13 2 3600 20260823054724 20260809041724 5166 cz. yLxEVRDTJnI3bbeoao+yU3vIyRBluWKuJjfNXvYZ91eMGyjjFjheNpu+ 10gUcx7QWDS6MeiwtEEywZyr03l6EQ=="
],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"104.155.16.79"
],
"ipv6": [
"2600:1900:4010:cc4::"
]
},
"mail": {
"spf": "v=spf1 a mx ip4:213.195.199.180 ip4:213.195.199.179 include:spf.protection.outlook.com -all",
"dmarc": "v=DMARC1; p=quarantine; rua=mailto:dmarc@coi.cz; ruf=mailto:dmarc@coi.cz; fo=1",
"dkim_selector": "selector1",
"dkim_host": "selector1._domainkey.coi.cz",
"dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2faxCFWwkhRQrLgxLvzFZ1tdB7F6KMhDGSjwoiW/u9Wo8qo/HZibOeezpxWhGOsG5IbTKE54Vc4R6bzsrNr5x4Yk8dU/X2wT1Z7qrRbjyGqp/ZaaRS8BZ3Jai0eU9u8yEeyAfGqri5Fb1tmqFKnJ6ha32dy8Cib90vcZfuz2NL/GJ+D57iNGG2zTS153e58LKiNgtD4wzBvnxHOanBawvJsn9V+SSVMo5kwpmUwhMqv0xgqEljruUZ/ZLH0aNlmGuySwWpuM2Rq0bVOvz2zm/scHUrsk/7b3rePeiPvJZKiSZ8PiLkXyEcuMCymrVqi21Qlj/Iu598hi8XvX1FQIQIDAQAB;",
"spf_analysis": {
"valid": true,
"lookups": 3,
"final": "-all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "quarantine"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "79.16.155.104.bc.googleusercontent.com",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"104.155.16.79"
],
"time_ms": 324.83
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"104.155.16.79"
],
"time_ms": 389.4
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"104.155.16.79"
],
"time_ms": 381.68
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"104.155.16.79"
],
"time_ms": 700.15
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"104.155.16.79"
],
"time_ms": 568.11
}
]
}
},
"ssl": {
"available": true,
"issuer": "Let's Encrypt",
"subject": "coi.cz",
"valid_from": "2026-07-25T03:07:51-05:00",
"valid_to": "2026-10-23T03:07:50-05:00",
"days_remaining": 72,
"san": [
"coi.cz",
"coi.gov.cz",
"www.coi.cz",
"www.coi.gov.cz"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384"
},
"http": {
"url": "https://coi.gov.cz/",
"status": "HTTP/1.1 200 OK",
"http_version": "2",
"headers": {
"date": "Tue, 11 Aug 2026 12:20:57 GMT",
"server": "Apache",
"location": "https://coi.gov.cz/",
"content-type": "text/html; charset=UTF-8",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; type=\"application/json\", ; rel=shortlink",
"set-cookie": "pll_language=cs; expires=Wed, 11-Aug-2027 12:20:57 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax",
"x-xss-protection": "1; mode=block",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin",
"x-permitted-cross-domain-policies": "none",
"x-frame-options": "SAMEORIGIN",
"strict-transport-security": "max-age=31536000; includeSubDomains",
"content-security-policy": "default-src 'self' *.youtube.com *.mapy.cz *.coi.cz *.coi.gov.cz; font-src 'self' fonts.gstatic.com data: fonts.bunny.net; img-src 'self' data: *.ytimg.com *.bzcompany.cz webarchiv.cz toplist.cz *.coi.cz *.coi.gov.cz https://www.google-analytics.com https://www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com *.google-analytics.com *.googleapis.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.bzcompany.cz cdn.jsdelivr.net *.googleapis.com https://www.googletagmanager.com; style-src 'unsafe-inline' 'self' *.googleapis.com *.jsdelivr.net *.coi.cz fonts.bunny.net; connect-src 'self' *.google-analytics.com *.doubleclick.net *.coi.cz *.coi.gov.cz https://region1.google-analytics.com; frame-src 'self' *.genial.ly *.genially.com mapy.cz *.mapy.cz mapy.com *.mapy.com *.youtube.com coi.gov.cz *.szn.cz *.seznam.cz"
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": true,
"x-content-type-options": true,
"x-frame-options": true,
"referrer-policy": true,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "Apache",
"powered_by": ""
},
"webpage": {
"url": "https://coi.gov.cz/",
"title": "ČOI – Česká obchodní inspekce kontroluje a dozoruje právnické a fyzické osoby prodávající nebo dodávající výrobky a zboží na vnitřní trh, poskytující služby nebo vyvíjející jinou podobnou činnost na vnitřním trhu, poskytující spotřebitelský úvěr nebo provozující tržiště (tržnice) pokud podle zvláštních právních předpisů nevykonává dozor jiný správní úřad.",
"description": "",
"success": true,
"error": "",
"status": 206
},
"network": {
"104.155.16.79": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "coi-cz.o-v1.mx.microsoft",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 21.7,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4017.1,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4011,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 99.38
}