muzeumvmilevsku.cz

.cz crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 705 ms crawled 2026-05-30

CZ · 93.185.108.156 · AS43541 VSHosting s.r.o.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Milevské muzeum
Language: cs

Open Graph

site name: Milevské muzeum

Technology

Server: Apache
CMS: Gatsby
jQuery: 3.2.1 known XSS (<3.5)
Stack: PHP

Analytics

Google Tag Manager

Ads

Meta Pixel

Fonts

Google Fonts

Third-party hosts loaded (5)

connect.facebook.net×1
fonts.googleapis.com×1
fonts.gstatic.com×1
kookiecheck.cz×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.tele3.cz
ns2.tele3.cz
ns3.tele3.eu

MX

10 mx1.egate.cz
20 mx2.egate.cz

Email authentication partial

SPF

v=spf1 a mx a:mail.egate.cz ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

dkim: v=DKIM1;t=s;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7DW8GYavHTkmutA/4qCiSZ6Evhl8m3QRdLjLMTmdm6VX15YZT1c6AFOc2C/kLCRM7s7R7MHXlLpsp9chB…

selectors probed

Certificate (current)

R12

from 2026-04-03 to 2026-07-02

Expires in 32 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://www.muzeumvmilevsku.cz/

present

content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy-report-only: upgrade-insecure-requests; default-src 'none'; object-src 'self'; media-src 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'nonce-5018cd80cfc1ec6357951f7078eb62961da1c307' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://maps.googleapis.com;