mesto-uh.cz

.cz crawl

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 614 ms crawled 2026-05-30

CZ · 217.198.122.161 · AS34222 ZONER a.s.

Reputation 92/100 weak subdomain policy

Classifying

HTML metadata

Title: Úvod | Uherské Hradiště
Language: cs
Generator: Drupal 9 (https://www.drupal.org)
Canonical: https://www.mesto-uh.cz/uvod

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (3)

static.addtoany.com×1
translate.google.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+420572525111

DNS records live

NS

dns.nextra.cz
sns.nextra.cz

MX

10 mailgw.mesto-uh.cz

TXT

MS=0273A73920E1609ABB4C8775C24C80DF1FEDC2F2

Verified for

Cisco
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@mesto-uh.cz; ruf=mailto:dmarc@mesto-uh.cz; fo=0; adkim=r; aspf=r; pct=100; rf=afrf; ri=86400; sp=none

policy: quarantine · sp=none

DKIM

selector1: v=DKIM1; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhANSrsF9IU1X7ybEnGygjh9kUnzyKbiHy9Tp+XdYQqYalDs25a+SL1hnuI3d7MQJGqOfgYxwu2BF8MjFOUdP7qqwjj1oS9Uh8J…

selectors probed

Certificate (current)

Thawte TLS RSA CA G1

from 2026-01-23 to 2027-02-13

Expires in 257 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.mesto-uh.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=(), fullscreen=(self), autoplay=(self), payment=(), interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src 'self' data: blob: https://fonts.gstatic.com/ https://www.gstatic.com/ https://translate.googleapis.com https://www.google.com https://www.google.cz https://translate.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://translate.google.com/ https://translate-pa.googleapis.com/ https://static.addtoany.com/ https://translate.google.com/ https://translate.googleapis.com/ https://www.googletagmanager.com/; style-src 'self' 'unsafe-inline' https://*.typekit.net/ https://www.gstatic.com/; font-src 'self' https://use.typekit.net/; frame-src https://static.addtoany.com/ https://www.mesto-uh.cz/ https://webaplikace.mesto-uh.cz https://youtube.com https://www.youtube.com https://www.google.com; connect-src 'self' https://translate.googleapis.com https://translate-pa.googleapis.com;
strict-transport-security: max-age=31536000