okholding.cz
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
Third-party hosts loaded (2)
- cdn.okweby.cz×5
- fra1.digitaloceanspaces.com×2
DNS records live
- NS
-
- ns1.ignum.com
- ns2.ignum.cz
- MX
-
- 11 mail.okgroup.cz
Email authentication strong
- SPF
-
v=spf1 include:spf.okgroup.cz include:cebia.cz include:spf.protection.outlook.com include:spf.smartemailing.cz mx -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc+677858@smartemailing.cz,mailto:it@okholding.cz; fo=1policy: reject (enforced) - DKIM
-
- mail:
v=DKIM1; h=sha256; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNfwabBXLm9wskfECk3Lngd4OWJzx3A0Ml8yTzqnTnC21sqB8TB5E1xwcTw91FKP88MeGbtcwK…
selectors probed - mail:
Certificate (current)
R12
Expires in 84 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
camera=(), microphone=(), geolocation=(), payment=(), usb=(), midi=(), accelerometer=(), gyroscope=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://stats.okholding.cz; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://www.facebook.net https://*.digitaloceanspaces.com https://cdn.okweby.cz https://image.mux.com https://*.mux.com https://okweby.cz https://*.okweby.cz https://img.logo.dev; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://api.resend.com https://*.mux.com https://stats.okholding.cz https://okweby.cz https://*.okweby.cz https://cdn.okweby.cz https://inferred.litix.io https://*.digitaloceanspaces.com; media-src 'self' blob: https://stream.mux.com https://*.edgemv.mux.com https://image.mux.com https://*.mux.com https://cdn.okweby.cz- strict-transport-security
max-age=31536000; includeSubDomains; preload