coophb.cz

HTML metadata

Title

COOP družstvo HB

Language

cs

Generator

WordPress 6.9.4

Feeds

Technology

Server: Apache
CMS: WordPress 6.9.4
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
www.googletagmanager.com×2
gmpg.org×1
www.facebook.com×1

Social

Contact

Phone

2026-04-21 15

DNS records live

NS

ns.wedos.com
ns.wedos.cz
ns.wedos.eu
ns.wedos.net

MX

10 mail.coophb.cz

Email authentication strong

SPF

v=spf1 a mx include:spf.smartemailing.cz ip4:77.104.214.2 ip4:77.104.214.3 ip4:37.235.104.207 ip4:185.137.145.183 ip4:185.137.145.3 ip4:185.137.145.4 ip4:185.137.145.10 ip4:185.137.145.11 ip4:185.137.145.12 ip4:185.64.223.152 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc+103939@smartemailing.cz,mailto:dmarc@coophb.cz; fo=1

policy: quarantine

DKIM

dkim: v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz45pcEZENdyd+FQYVEMg66xjjixPAjKNuT1WEMt0qsCpq3EkpAzmf1oGJVMoo4i4CClJ…

selectors probed

Certificate (current)

R12

from 2026-05-24 to 2026-08-22

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.coophb.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;
strict-transport-security: max-age=63072000; includeSubDomains; preload, max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: unsafe-none, unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default', unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin, cross-origin