hochtief.cz

HTML metadata

Title

HOCHTIEF

Description

Svým zákazníkům nabízí akciová společnosti HOCHTIEF CZ širokou škálu služeb, od prvotních diskuzí nad projektem až po realizaci těch nejnáročnějších zakázek. Vychází z padesátileté historie HOCHTEIF VSB a navazuje na nejlepší tradice českého stavebnictví, aby jej svou činností dále rozvíjela a posouvala k modernímu pojetí torby společného prostoru pro život.

Translations

en
sk

Technology

jQuery: 3.7.1
Stack: PHP

Third-party hosts loaded (1)

www.hochtief.sk×1

Social

Registration

Registrar

REG-ZONER

Created

2001-06-29

Expires

2026-06-28 27 days left

Updated

2018-10-26

Name servers

ns1.regzone.cz
ns1.regzone.de
ns1.regzone.info

DNS records live

NS

ns1.regzone.cz
ns1.regzone.de
ns1.regzone.info

MX

0 hochtief-cz.mail.protection.outlook.com

TXT

linkedin-site-verification=ffab876d-637f-45e4-a23c-6cab6206ce3f
BU28H+6R7AMVZZZLYM60ACATHinYja WK4/LGwImDoiPtlHeRbAh5TMzM7NOH 5qZ1dv+A/3LvPHl7iPC/v+elvQ==
_telesec-domain-validation=F9572938098755422E8A6C7F1091B64AB145535765E40259E9410602A5490159

Verified for

Apple

Email authentication strong

SPF

v=spf1 ip4:10.220.66.213 ip4:194.213.46.99 ip4:194.213.46.98 ip4:194.213.46.106 ip4:185.60.38.44 include:spf.protection.outlook.com include:psm.knowbe4.com include:sendgrid.net include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; ruf=mailto:dmarc@hochtief.cz; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCyQ/TQW5hmusxK+nDjT8yFeBt171PmwzcbMGkAaE6Fvrt5/ia5XM7MHQN1ka5s3XU1pAB7VoAAl4ZPZiFwj7…

selectors probed

Certificate (current)

R12

from 2026-04-28 to 2026-07-27

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.hochtief.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://t.leady.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://www.googletagmanager.com https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://www.googletagmanager.com data:; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; child-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' https://www.google-analytics.com https://t.leady.com https://stats.g.doubleclick.net https://region1.google-analytics.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload