lideahory.cz

HTML metadata

Technology

Server

Apache

CMS

Drupal

jQuery

1.12.4 known XSS (<3.5)

Third-party hosts loaded (1)

• ajax.googleapis.com×1

Contact

Email

• lideahory@lideahory.cz

Phone

• +420 257 328 388

DNS records live

NS

• ns.alpy.cz
• ns.jirasko.org
• sns.jirasko.org

MX

• 10 mail.alpy.cz

Verified for

• Google

Email authentication weak

SPF

v=spf1 mx a ip4:185.219.170.115 ip4:185.219.170.105 ip4:109.205.73.70 ip4:95.168.201.70 ip4:109.205.73.83 ip4:109.205.73.76 ip6:2a00:1238:1:2::14 ip4:95.168.201.64/26 ~all

softfail (~all)

DMARC

not published

DKIM

• default: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qTATssNmrTHzL5RCbhbbgocWOawzwYXDWXmuT0ERDLtREVH3o9OuLB68oHfxuPw7K8+…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://lideahory.cz/

present

• x-frame-options
• x-content-type-options
• permissions-policy

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy

Links to (19)

• yate.cz×1
• tilak.cz×1
• sirjoseph.cz×1
• singingrock.cz×1
• sensor.cz×1
• rockpoint.cz×1
• prosport.cz×1
• prabos.cz×1
• petzl.cz×1
• neverstopexploring.cz×1
• montane.cz×1
• katadyn.cz×1
• hudy.cz×1
• hannah.cz×1
• festivalalpinismu.cz×1
• asolo.cz×1
• alpy.cz×1
• alpsport.cz×1
• alpenverein.cz×1

Linked from (4)

• dismanteam.com×1
• festivalalpinismu.cz×1
• alpy.cz×1
• alpenverein.cz×1