bookport.cz
HTML metadata
Technology
- Server
- Microsoft-IIS
- CMS
- Ghost
- jQuery
- 2.2.4 known XSS (<3.5)
- Stack
- ASP.NET
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- gradabookportumbracocms.azurewebsites.net×2
- cdn.speakara.com×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns1.websupport.cz
- ns2.websupport.cz
- ns3.websupport.eu
- MX
-
- 0 bookport-cz.mail.protection.outlook.com
- 10 gateway.grada.cz
- 50 mail-relay-2.nethost.cz
- TXT
-
m5hci853lntvujnts812caq3d9
- Verified for
-
- Meta
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:sendgrid.net include:spf.protection.outlook.com include:mailgun.org -allstrict (-all) - DMARC
-
v=DMARC1; p=nonepolicy: none (monitoring only) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CSO4GF3Hmrb56SaVX6HAapMgArSFr0RFv1VT612JokCrcSyGMJg7TUpEAsnbnH4P/vy9rCIiYUVRLQbG1… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDN/awLzNWnIv+hfoTQDQGB/tQzlEODPYwyNFG2fDHe80O1xdSvf0mIuZAEo78yxz8FwjH4RE+FtAgw/5roCC7+gk…
selectors probed - s1:
Certificate (current)
GeoTrust TLS RSA CA G1
Expires in 181 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss: 'self' wss://uat.speakara.com https://cdn.speakara.com; script-src https: 'unsafe-inline' 'unsafe-eval' https://cdn.speakara.com; img-src * data:;- strict-transport-security
max-age=31536000; includeSubDomains
Links to (6)
- apple.com×1
- facebook.com×1
- google.com×1
- instagram.com×1
- linkedin.com×1
- tiktok.com×1
Linked from (5)
- metafora.cz×1
- bambook.cz×1
- alferia.cz×1
- cosmopolis.cz×1
- grada.cz×1