lacasadelhabano.cz

HTML metadata

Technology

Server

nginx

jQuery

1.9.1 known XSS (<3.5)

Social

• facebook

DNS records live

NS

• alfa.ns.active24.cz
• beta.ns.active24.cz
• gama.ns.active24.sk

MX

• 0 lacasadelhabano-cz.mail.protection.outlook.com
• 20 mx2.active24.com

Verified for

• Microsoft 365

Email authentication weak

SPF

v=spf1 a mx include:gastrogroup.cz include:spf.protection.outlook.com -all

strict (-all)

DMARC

not published

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTWPp+KTQWZLQOxMpqVZj5UsC3TAlklxh5ok1yQAhE5VvvFxVFTVeqS8ZbHeN2l8WLOtywznoa9QKU…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked over plain HTTP: http://www.lacasadelhabano.cz/

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (22)

• virtual-zoom.cz×1
• ukonvice.cz×1
• ucisaru.cz×1
• tradicion.cz×1
• tabakinvest.cz×1
• salvatorhotel.cz×1
• olivaverde.cz×1
• larepublica.cz×1
• lacasaargentina.cz×1
• habanos.com×1
• grandhotelpraha.cz×1
• gastrogroup.cz×1
• facebook.com×1
• eltoronegro.cz×1
• dutchpub.cz×1
• doutnikyshop.cz×1
• cigarclub.cz×1
• cafemozart.cz×1
• cafe80.cz×1
• bodeguita.cz×1
• barkagutovka.cz×1
• asiantemple.cz×1

Linked from (7)

• doutnikyshop.cz×1
• grandhotelpraha.cz×1
• cafemozart.cz×1
• eltoronegro.cz×1
• ukonvice.cz×1
• dutchpub.cz×1
• gastrogroup.cz×1