jvg.cz
HTML metadata
Technology
- Server
- Apache
Third-party hosts loaded (2)
- cdn.jsdelivr.net×1
- www.freeprivacypolicy.com×1
DNS records live
- NS
-
- ns.forpsi.cz
- ns.forpsi.it
- ns.forpsi.net
- MX
-
- 10 mx.zoho.com
- 20 mx2.zoho.com
- 50 mx3.zoho.com
- Verified for
-
- Zoho
Email authentication partial
- SPF
-
v=spf1 include:zoho.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:info@jvg.cz; ruf=mailto:info@jvg.cz; sp=none; adkim=r; aspf=rpolicy: none (monitoring only) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 66 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Permissions Policy
Header values
- referrer-policy
no-referrer, strict-origin-when-cross-origin- x-frame-options
ALLOW-FROM www.youtube.com- x-content-type-options
nosniff- content-security-policy
default-src https://www.jvg.cz wss://www.cuesport.eu/wss/ https://www.cuesport.eu https://www.jvg.cz 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://region1.analytics.google.com https://cdn.tiny.cloud https://cdn.jsdelivr.net; style-src 'unsafe-inline' https://www.jvg.cz https://cdn.jsdelivr.net; script-src https://www.jvg.cz https://www.freeprivacypolicy.com https://www.google-analytics.com https://connect.facebook.net https://www.googletagmanager.com https://region1.analytics.google.com; img-src data: https://www.jvg.cz https://www.jvg.cz https://www.jvg.cz https://www.google.com https://www.google.cz https://i.ytimg.com https://ceskykarambol.cz https://ceskykarambol.cz; frame-src https://www.youtube.com https://td.doubleclick.net https://www.google.com https://maps.google.com https://www.facebook.com https://web.facebook.com https://vod.sooplive.co.kr https://play.sooplive.co.kr https://play.sooplive.com https://vod.sooplive.com; form-action * redirec- strict-transport-security
max-age=31536000; includeSubDomains; preload