bily-mlyn.com
HTML metadata
Technology
- Server
- nginx
- Stack
- PHP
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×2
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- Tucows Domains Inc.
- Created
- 2023-05-24
- Expires
- 2027-05-24 353 days left
- Updated
- 2026-02-10
- Name servers
-
- ns1.webglobe.cz
- ns2.webglobe.cz
- ns3.webglobe.com
DNS records live
- NS
-
- ns1.webglobe.cz
- ns2.webglobe.cz
- ns3.webglobe.com
- MX
-
- 10 email.webglobe.cz
- 10 email2.webglobe.cz
- 10 email3.webglobe.cz
- 10 email4.webglobe.cz
- TXT
-
v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email;v=spf2.0/mfrom,pra +a +mx include:_spf2.webglobe.cz -all
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 a mx include:_spf.webglobe.cz smtpx.stable.cz -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8JcDN+a0sl3tlSJgzOlpaCdlcCLgEJ/uNbBUHNRknnAkLcQK+7UmWRsb/ZXccKGjzLE6wvXu7BuDH…
selectors probed - default:
Certificate (current)
R13
Expires in 52 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://www.menicka.cz/ https://booking.previo.app/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://www.menicka.cz/ https://booking.previo.app/ ; connect-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ http- strict-transport-security
max-age=2592000; includeSubDomains