madrockclimbing.cz

.cz crawl

First seen 2026-05-28 · Last seen 2026-05-30 · ok HTTP/1.1 200 1188 ms crawled 2026-05-30

FR · 178.32.252.115 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Úvodní stránka | Mad Rock
Language
cs

Technology

Server
nginx
CMS
Gatsby
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar
REG-ACTIVE24
Created
2025-08-27
Expires
2026-08-26 86 days left
Updated
2025-08-28
Name servers
  • inet.faster.cz
  • inet.zelenadata.cz

DNS records live

NS
  • inet.faster.cz
  • inet.zelenadata.cz
MX
  • 5 mx.faster.cz

Email authentication weak

SPF
v=spf1 include:spf.contimex.cz ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

ZeroSSL RSA DV SSL CA 2
from 2026-05-24 to 2026-08-23
Expires in 83 days

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.madrockclimbing.cz/cs/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
DENY
permissions-policy
accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=()
x-content-type-options
nosniff
content-security-policy
style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net *.cookiehub.net cookiehub.net cdn.cookiehub.eu; img-src 'self' data: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googlesyndication.com *.g.doubleclick.net *.google.com *.google.cz *.doubleclick.net *.facebook.com *.cdninstagram.com api.mapbox.com *.seznam.cz *.fbcdn.net; default-src 'self' www.google.com/recaptcha/ www.googletagmanager.com www.youtube.com/embed/ www.google.com/maps/ *.doubleclick.net *.issuu.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com *.g.doubleclick.net *.cookiehub.net cdn.cookiehub.eu *.google-analytics.com *.facebook.net *.seznam.cz; font-src 'self' fonts.gstatic.com *.typekit.net; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googlesyndication.com *.g.doubleclick.net *.google.com *.google.cz *.cookiehub.net *.facebook.com *.cookiehub.eu; frame-s
strict-transport-security
max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy
same-origin; report-to="default"
cross-origin-embedder-policy
unsafe-none; report-to="default"
cross-origin-resource-policy
same-origin

Links to (2)

Linked from (1)