mojepohoda.cz

HTML metadata

Title: Moje POHODA
Description: ÄŚasopis pro uĹľivatele ĂşÄŤetnĂho programu POHODA pĹ™inĂˇĹˇĂ tĹ™ikrĂˇt do roka informace o novinkĂˇch v programu a dalĹˇĂ zajĂmavosti z ĂşÄŤetnictvĂ, danĂ, prĂˇva a podnikĂˇnĂ.

Technology

jQuery: 3.3.1 known XSS (<3.5)
Stack: ASP.NET

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Contact

Phone

800 178 278

Registration

Registrar

REG-ZONER

Created

2001-11-05

Expires

2026-11-05 157 days left

Updated

2019-05-03

Name servers

ns1.regzone.cz
ns1.regzone.de
ns1.regzone.info

DNS records live

NS

ns1.regzone.cz
ns1.regzone.de
ns1.regzone.info

MX

1 relay.zoner.com
10 10mx.zoner.com
15 15mx.zoner.com

TXT

Show 4 TXT records

_4fis6tn44o1hhxqndjoy1zpui0krcio
_xpqkfbmzkn0nfi7vbtfsrzslgn1lf0g
wxy2xqs77c12cfhnqky624mg90jc8f2v
2f7dz2wv0tdyfjvpx82xxmj1f498k5l2

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GeoTrust EV RSA CA G2

from 2026-04-15 to 2026-10-31

Expires in 152 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mojepohoda.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' https://fonts.gstatic.com/ https://ekr.zdassets.com/ wss://widget-mediator.zopim.com/ https://v2.zopim.com/ data:; object-src 'self' https://www.youtube.com/ data:; img-src 'self' https://fonts.gstatic.com/ https://www.stormware.cz/ http://www.mojepohoda.cz/ https://ssl.google-analytics.com/ https://www.adobe.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://v2.zopim.com https://www.google.com https://www.google-analytics.com https://www.google.cz https://i.ytimg.com https://stormware.bot.artin.cz https://c.seznam.cz https://stats.g.doubleclick.net https://www.facebook.com https://*.clarity.ms https://*.bing.com https://www.googletagmanager.com data:; child-src https://www.youtube.com https://www.instagram.com https://www.youtube-nocookie.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://www.googletagmanager.com/; media-src 'self' https://stormware.bot.artin.cz/; script-src 'self' 'unsafe-inline' 'unsafe-eva
strict-transport-security: max-age=31536000; includeSubDomains; preload