ownest.cz

HTML metadata

Title: Ownest - Odložená hypotéka
Description: Vlastní byt? Díky Ownestu je to možné. Vysněný byt pro vás koupíme, a zatímco v něm budete bydlet v nájmu, na hypotéku si našetříte. Stačí mít 3 % z ceny bytu a my vám dáme až 2 roky na jeho odkoupení za fixně danou cenu.

Open Graph

title: Ownest - Odložená hypotéka
description: Vlastní byt? Díky Ownestu je to možné. Vysněný byt pro vás koupíme, a zatímco v něm budete bydlet v nájmu, na hypotéku si našetříte. Stačí mít 3 % z ceny bytu a my vám dáme až 2 roky na jeho odkoupení za fixně danou cenu.

Technology

Server: nginx
CMS: Nuxt

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×2
fonts.gstatic.com×1

Social

Contact

Email

Registration

Registrar

REG-ACTIVE24

Created

2021-12-10

Expires

2026-12-09 191 days left

Updated

2024-07-26

Name servers

ns1.websupport.cz
ns2.websupport.cz
ns3.websupport.eu

DNS records live

NS

ns1.websupport.cz
ns2.websupport.cz
ns3.websupport.eu

MX

0 ownest-cz.mail.protection.outlook.com

Verified for

Google
Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:49.12.204.4 ip6:2a01:4f8:1c1e:d1cc::1 include:_spf.google.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:re+njagwhimfeq@dmarc.postmarkapp.com; sp=none; aspf=r;

policy: none (monitoring only) · sp=none

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2KArjzLF/j9HlfnkHiFhU/fOI88oBfpCvdmM9OsictG9adkhrBnZ+wscHwFg3DQJ0uipG456bhnL1…

selectors probed

Certificate (current)

R12

from 2026-05-03 to 2026-08-01

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ownest.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), clipboard-read=(), clipboard-write=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.firebaseio.com https://*.small.chat https://*.google-analytics.com https://*.cp.ownest.cz https://*.smartlook.com https://*.smartlook.cloud https://cdn.skypack.dev https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://*.o.devb.space https://slideslive.com https://embed.slideslive.com https://*.facebook.net; connect-src 'self' https://geolocation-db.com https://*.firebaseio.com wss://*.firebaseio.com https://*.amazonaws.com https://*.google-analytics.com https://*.cp.ownest.cz https://*.smartlook.com https://*.smartlook.cloud https://*.o.devb.space https://o1255812.ingest.sentry.io https://slideslive.com https://embed.slideslive.com https://*.facebook.com https://*.facebook.net; style-src 'self' 'unsafe-inline' https://static.small.chat https://*.cp.ownest.cz https://cdn.skypack.dev https://*.o.devb.space https://fonts.googleapis.com; font-src 'self' htt
strict-transport-security: max-age=31536000; includeSubDomains