eos.cz

HTML metadata

Title: Platforma EOS pro sportovní kluby a jiné organizace | eos.cz
Description: Členská platforma EOS je aplikace pro sportovní kluby i jiné organizace – komunity, asociace, kroužky. EOS nabízí řadu chytrých nástrojů pro pomoc s administra…
Language: cs

Open Graph

url: https://www.eos.cz/
title: Platforma EOS pro sportovní kluby a jiné organizace

Technology

Server: nginx

Social widgets

YouTube Embed

Third-party hosts loaded (3)

eoscz.eoscms.zone×104
www.youtube.com×9
cdn.jsdelivr.net×7

Social

Registration

Registrar

REG-THINLINE

Created

2008-12-07

Expires

2026-12-06 188 days left

Updated

2024-08-25

Name servers

ns1.thinline.cz
ns2.thinline.cz
ns3.cesky-hosting.eu

DNS records live

NS

ns1.thinline.cz
ns2.thinline.cz
ns3.cesky-hosting.eu

MX

10 mx.zoho.com
20 mx2.zoho.com
50 mx3.zoho.com

TXT

cywetadns-domain-verification=33ff0a58b91b502a35354249c7eddc02

Verified for

1Password
Atlassian
Google
Meta
Zoho

Email authentication weak

SPF: v=spf1 a:replikant2620.thinline.cz include:spf.spolehlive-servery.cz include:spf.cesky-hosting.cz include:zoho.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-11 to 2026-07-10

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.eos.cz/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
permissions-policy

findings

missing Content Security Policy
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdn.eos.cz https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' https://*.hotjar.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://www.googletagmanager.com https://*.google.com https://stats.g.doubleclick.net; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://docs.google.com https://calendar.google.com https://www.facebook.com https://www.instagram.com https://www.google.com https://airtable.com https://donio.cz https: