simploshop.cz
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- cdn.easycookie.io×1
- www.googletagmanager.com×1
- www.simploshop.sk×1
DNS records live
- NS
-
- maisie.ns.cloudflare.com
- razvan.ns.cloudflare.com
- Verified for
-
Email authentication no MX
- SPF
- not published
- DMARC
-
v=DMARC1; p=none; rua=mailto:571315j5vj@dmarc-reports.ecomailapp.com; fo=1; ri=86400;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 47 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
sameorigin- permissions-policy
accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), interest-cohort=(self), keyboard-map=(self), local-fonds=(), magnetometer=(self), microphone=(self), midi=(self), payment=(self), sync-xhr=(self), usb=(self), web-share=(self)- x-content-type-options
nosniff- content-security-policy
base-uri * 'unsafe-inline';child-src * 'unsafe-inline';connect-src * 'unsafe-inline';default-src * 'unsafe-inline';font-src * data: 'unsafe-inline';form-action * 'unsafe-inline';frame-ancestors *;frame-src * 'unsafe-inline';img-src * data: 'unsafe-inline';manifest-src * 'unsafe-inline';media-src * data: 'unsafe-inline';object-src * data: 'unsafe-inline';script-src * data: 'unsafe-inline' 'unsafe-eval' 'nonce-4lLoMhKzcgLdnZHrnS8IY20noaE5zGF2';script-src-attr * data: 'unsafe-inline' 'unsafe-eval';script-src-elem * data: 'unsafe-inline' 'unsafe-eval';style-src * data: 'unsafe-inline' 'nonce-4lLoMhKzcgLdnZHrnS8IY20noaE5zGF2';style-src-attr * data: 'unsafe-inline';style-src-elem * data: 'unsafe-inline';worker-src *- strict-transport-security
max-age=31536000; includeSubDomains;
Links to (8)
- vut.cz×1
- toolandia.de×1
- stratilek.cz×1
- simplo.cz×1
- salmingstore.cz×1
- oleje.cz×1
- monroo.eu×1
- genesis-eshop.cz×1