ceskykarambol.cz

HTML metadata

Technology

Server

nginx

CMS

WordPress

jQuery

1.9.1 known XSS (<3.5)

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Third-party hosts loaded (6)

• cdnjs.cloudflare.com×3
• www.youtube.com×3
• ajax.googleapis.com×2
• fonts.googleapis.com×1
• www.google.com×1
• www.poolbilliard.cz×1

Social

• youtube
• facebook
• twitter

DNS records live

NS

• ns1.hukot.cz
• ns2.securitynet.cz
• ns3.hukot.cz

MX

• 10 mail.hukot.net
• 100 mx2.securitynet.cz

Email authentication weak

SPF

v=spf1 a mx include:spf.hukot.net ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://ceskykarambol.cz/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (13)

• youtube.com×1
• twitter.com×1
• simonis.cz×1
• jvg.cz×1
• gorinacloth.es×1
• google.com×1
• facebook.com×1
• eurobillard.org×1
• dobrereznictvi.cz×1
• cookiedatabase.org×1
• cmbs.cz×1
• change.org×1
• bcbohumin.cz×1

Linked from (1)

• cmbs.cz×1