hcchocen.cz

.cz crawl

First seen 2026-06-01 · Last seen 2026-06-02 · ok HTTP/1.1 200 681 ms crawled 2026-06-02

DE · 49.12.23.165 · AS24940 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Homepage - HC Spartak Choceň
Description: HC Spartak Choceň
Language: cs

Open Graph

url: https://www.hcchocen.cz/
title: Homepage

Technology

Server: nginx

Third-party hosts loaded (3)

hcchocen.eoscms.cz×102
cdn.jsdelivr.net×6
cdnjs.cloudflare.com×4

Social

DNS records live

NS

ns-1.toras-systems.com
ns-2.toras-systems.com

MX

10 mailin2.ignum.eu
10 mailin3.ignum.eu
20 mailin4.ignum.eu
5 mailin.ignum.eu

Email authentication partial

SPF

v=spf1 a mx include:_spf.webglobe.cz ip4:46.234.119.233 ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZywV/R7WZw676tC8r8CB14LAZH+0t9SbxfpC+rjJMaV/saNVMq6K6aGzq+s3ojY7OMZ2Ivi8o+VHpS9jOqD…

selectors probed

Certificate (current)

from 2026-04-25 to 2026-07-24

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.hcchocen.cz/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
permissions-policy

findings

missing Content Security Policy
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' https://*.hotjar.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://www.googletagmanager.com https://*.google.com https://stats.g.doubleclick.net; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://docs.google.com https://calendar.google.com https://www.facebook.com https://www.instagram.com https://www.google.com https://airtable.com https://donio.cz https://ceskyflorbal.tv h