ibrno.cz

HTML metadata

Technology

Server

Apache

CMS

Joomla 1.5

jQuery

1.8.3 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (6)

• b.ccb.cz×4
• code.jquery.com×1
• i.ccb.cz×1
• www.google.com×1
• www.googletagmanager.com×1
• www.toplist.cz×1

Social

• facebook

DNS records live

NS

• ns1.ignum.com
• ns2.ignum.cz

MX

• 10 mail.ccb.cz
• 20 mail2.ccb.cz

Verified for

• Google

Email authentication strong

SPF

v=spf1 mx a ip4:94.112.250.58/32 ip4:89.185.227.190/32 ip4:212.24.129.230/32 ip4:83.167.250.168/32 ip4:78.80.61.124/32 ip4:89.185.237.201/32 ip4:109.80.216.225/32 -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; fo=0; rua=mailto:postmaster@mail.ccb.cz; ruf=mailto:postmaster@mail.ccb.cz; rf=afrf; pct=100; ri=86400

policy: reject (enforced) · sp=reject

DKIM

• default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9ZC749n+yhFDEfPGiXlcojKpm2PbcrTf2cROCaeowzFU7CQh2ifZKGTJ2YVG8iu0fC0oFvQ0DJ40d31NXQL…

selectors probed

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.ibrno.cz/

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing Permissions Policy

Links to (17)

• automobilovedily24.cz×1
• cad.cz×1
• casopisgolf.cz×1
• ccb.cz×1
• facebook.com×1
• golfinfo.cz×1
• grafika-tisk-brno.cz×1
• listyjm.cz×1
• mzm.cz×1
• salina-brno.cz×1
• salonvin.cz×1
• systemonline.cz×1
• technikaatrh.cz×1
• termsfeed.com×1
• vinarstvivajbar.cz×1
• vinnagalerie.cz×1
• vinoholec.cz×1

Linked from (8)

• golfinfo.cz×1
• listyjm.cz×1
• hwforum.cz×1
• casopisgolf.cz×1
• technikaatrh.cz×1
• ccb.cz×1
• systemonline.cz×1
• cad.cz×1