indexo.dev

cdvuz.de

.de crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 1200 ms crawled 2026-05-30

DE · 52.28.24.127 · AS16509 Amazon.com, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Výzkumný Ústav Železniční, a. s.
Language
de-DE
Generator
WordPress 6.9.4
Canonical
https://www.cdvuz.de/

Open Graph

url
https://www.cdvuz.de/
title
Výzkumný Ústav Železniční, a. s.
locale
de_DE
site name
Výzkumný Ústav Železniční, a. s.

Technology

Server
nginx
CMS
WordPress 6.9.4
jQuery
3.5.1

Third-party hosts loaded (3)

  • www.cdvuz.cz×42
  • ys-common.s3.amazonaws.com×12
  • code.jquery.com×1

Contact

Phone

Registration

Updated
2025-04-16
Name servers
  • ns1.websupport.cz.
  • ns2.websupport.cz.
  • ns3.websupport.eu.

DNS records live

NS
  • ns1.websupport.cz
  • ns2.websupport.cz
  • ns3.websupport.eu

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-04-18 to 2026-07-17
Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.cdvuz.de/

present
  • content-security-policy
  • permissions-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
content-security-policy
script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://code.jquery.com/ https://cdnjs.cloudflare.com https://*.openstreetmap.org https://*.tile.openstreetmap.org https://www.google.com/ https://api-verify.recaptcha.net https://maps.googleapis.com/ https://www.youtube.com https://www.gstatic.com/ https://www.cdvuz.cz; img-src 'self' data: blob: https://*.amazonaws.com/ https://secure.gravatar.com/ https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://*.openstreetmap.org https://*.tile.openstreetmap.org https://maps.google.com/ https://maps.googleapis.com/ https://www.youtube.com https://api-verify.recaptcha.net https://www.gstatic.com/ https://www.cdvuz.cz; object-src 'self' data: blob: https://cdnjs.cloudflare.com/ https://*.openstreetmap.org https://*.tile.openstreetmap.org https://*.google.com/ https://*.google.cz/ https://maps.google.com/ https://maps.googleapis.com/ https://www.youtube.com https://api-verify.recaptcha.net https://www.gstatic.com/ https://www.c

Links to (1)

Linked from (1)