bal.cz

HTML metadata

Title: BAL.cz - skupina BARVY A LAKY | Barvy a Laky Hostivař - barvy, laky a drogerie
Description: Provozujeme největší síť prodejen barev, laků a drogerie. Máme přes 10 000 druhů zboží na více než 200 prodejnách po celé ČR. Poradíme s výběrem vhodné barvy.
Language: cs
Canonical: https://www.bal.cz/

Technology

Server: Apache
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (5)

img.youtube.com×4
api.mapy.cz×1
cdn.upsearch.cz×1
datalayer.praguebest.cz×1
www.googletagmanager.com×1

Social

Contact

Address: Průmyslová 1472/11, 102 00, Praha 10 Hostivař, CZ

Registration

Registrar

REG-ACTIVE24

Created

1998-05-18

Expires

2026-10-11 132 days left

Updated

2019-10-27

Name servers

bart.ns.cloudflare.com
irma.ns.cloudflare.com

DNS records live

NS

bart.ns.cloudflare.com
irma.ns.cloudflare.com

MX

10 bal-cz.mail.protection.outlook.com

Verified for

Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:admin@abis-its.cz; ruf=mailto:admin@abis-its.cz

policy: none (monitoring only)

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDi2pJJsDwOJUhsvf58pGoQ5rBRD8rtSfFtphTZ+q1S9eRUR2Y+bYhRYY/dg5TavfQwVC4GjM6UpMIzhzDa10…

selectors probed

Certificate (current)

E7

from 2026-04-06 to 2026-07-05

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bal.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(self), camera=(self)
x-content-type-options: nosniff
content-security-policy: default-src https: blob:; connect-src https: wss:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: rec.smartlook.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net cookies.praguebest.cz; style-src 'self' 'unsafe-inline' widget-v3.smartsuppcdn.com *.gstatic.com *.google.com fonts.googleapis.com ajax.googleapis.com unpkg.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.foxentry.com *.foxentry.cz *.mapy.cz cookies.praguebest.cz www.googletagmanager.com cdn.upsearch.cz cdn2.upsearch.cz cdnjs.cloudflare.com; object-src 'self'; img-src 'self' https: data: https://www.google-analytics.com *.gstatic.com; font-src https: data: widget-v3.smartsuppcdn.com *.gstatic.com; frame-ancestors 'self' *.creativecdn.com *.hotjar.com *.googletagmanager.com; report-uri https://balshop.report-uri.com/r/d/csp/enforc
strict-transport-security: max-age=31536000; includeSubDomains; preload