generalipenze.cz

HTML metadata

Title: Úvodní strana
Description: Lepší penzijko s benefity pro vás i vaše blízké. Spořte si na důchod s jednou z největších penzijních společností na trhu a zajistěte sobě i svým dětem budoucnost, která za to stojí.
Language: cs

Technology

CDN: Cloudflare
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.google.com×1
www.googletagmanager.com×1

Social

Contact

Phone

261149111

Registration

Registrar

REG-ACTIVE24

Created

2019-05-03

Expires

2027-05-02 335 days left

Updated

2025-02-20

Name servers

celeste.ns.cloudflare.com
eugene.ns.cloudflare.com

DNS records live

NS

celeste.ns.cloudflare.com
eugene.ns.cloudflare.com

MX

10 generali-com.mail.protection.outlook.com

TXT

Show 4 TXT records

y3bsb1mlzyv7kc64y0brw65qgn9zc84d
ycl2hwzw26zmvy61qk026p4m3kr7flmm
ADw4W7bvmaHjSa7nD1RTYyX78wKhoCDIfK5QIuP3powyYVtnE1bxgtPRiRfexBbDJG2vmF0aGkEOp/3ampJgEQ==
rHt2EkO2kqy+uokc9mni7ly4hpNKdZ1QCKv/dfJV1OnVNOdpfhPGvKhyjnmmWVb7JaewARefLRk7oLXlDZrKcw==

Verified for

GlobalSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.praguebest.cz include:_spf01.cpas.cz include:_spf02.cpas.cz include:emailmachine.cz -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-rua@generali.com; sp=quarantine; adkim=r; aspf=r; fo=1;ri=86400

policy: quarantine · sp=quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuaI/Q5dYkrAPTmovCSse76UD2nzL+1azksvVwvAyhB1STGk8Hc7i2OxgiW3Ie/ImCs6Af5gYejVoz…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPkCwP4hE4AALNnulJ5nPBtdZ2l/KmCKieuVcoi60nlSX7DAyYvnPV0X2tksIzyCTlSrrL+uj/1Eo4…
mail: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDiduF1M8qpMX6xJ/NwqpZTonxhDVRlfiOOObHPYBL7moMOJDoGMs9cPtsk83EitiV+TEWezv0teTKdMkD+zJ…

selectors probed

Certificate (current)

WE1

from 2026-04-05 to 2026-07-04

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.generalipenze.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(self), camera=(self)
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.office.net *.bing.com *.doubleclick.net *.googletagmanager.com *.googleapis.com *.analytics.google.com *.google-analytics.com www.google.com www.google.cz *.gstatic.com cdn.cookielaw.org *.clarity.ms connect.facebook.net www.facebook.com *.seznam.cz *.cpas.cz cpas.cz s2.adform.net track.adform.net *.doubleclick.net www.googleadservices.com i.ytimg.com pagead2.googlesyndication.com *.smartsuppchat.com *.cpas.cz cpas.cz privacyportal-eu.onetrust.com www.youtube.com www.youtube-nocookie.com;connect-src 'self' wss: *.cookiebot.com *.googletagmanager.com www.youtube.com www.youtube-nocookie.com *.kc-aibot.cpas.cz *.cpas.cz cpas.cz *.google.com *.google.cz *.google-analytics.com *.googlesyndication.com *.clarity.ms cdn.cookielaw.org *.seznam.cz *.onetrust.com *.doubleclick.net
strict-transport-security: max-age=31536000; includeSubDomains; preload