mojebanka-online.cz

.cz crawl

First seen 2026-05-28 · Last seen 2026-05-30 · ok HTTP/1.1 200 749 ms crawled 2026-05-30

CZ · 185.25.184.132 · AS24971 MasterDC s.r.o.

Reputation 100/100

Classifying

HTML metadata

Title: Internetové bankovnictví - banka
Description: Přihlášení se do internetového bankovnictví Moneta, KB, AriBank, Servis24, Erasvět a dalších bankovních účtů.

Open Graph

title: Internetové bankovnictví - banka
description: Přihlášení se do internetového bankovnictví Moneta, KB, AriBank, Servis24, Erasvět a dalších bankovních účtů.

Technology

Server: Apache
jQuery: 1.9.1 known XSS (<3.5)
Stack: PHP

Analytics

Google Tag Manager

Ads

Google AdSense
Google Ads (DoubleClick)

Fonts

Google Fonts

Third-party hosts loaded (8)

pagead2.googlesyndication.com×5
fonts.googleapis.com×3
analytics.ahrefs.com×1
leader.genes.cz×1
maxcdn.bootstrapcdn.com×1
securepubads.g.doubleclick.net×1
www.genes.cz×1
www.googletagmanager.com×1

Registration

Registrar

REG-GRANSY

Created

2013-02-14

Expires

2027-02-13 257 days left

Updated

2013-05-06

Name servers

ns1.netio.cz
ns2.netio.cz
ns3.netio.cz

DNS records live

NS

ns1.netio.cz
ns2.netio.cz
ns3.netio.cz

Verified for

Google

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-24 to 2026-08-22

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.mojebanka-online.cz/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; frame-src *; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; font-src * data:; connect-src *;
strict-transport-security: max-age=63072000; includeSubDomains; preload