sroubamatka.cz

HTML metadata

Technology

Server

Apache

CMS

Joomla

jQuery

1.9.0 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (3)

• ajax.googleapis.com×3
• code.jquery.com×1
• www.googletagmanager.com×1

Social

• facebook

DNS records live

NS

• ns1.websupport.cz
• ns2.websupport.cz
• ns3.websupport.eu

MX

• 10 mailin1.sroubamatka.cz
• 100 mailin2.sroubamatka.cz

Verified for

• Google

Email authentication weak

SPF

v=spf1 include:spf.active24.com mx a a:web.internetportal.cz a:mail.internetportal.cz a:mail.c26.cz include:_spf.m1.websupport.sk ~all

softfail (~all)

DMARC

not published

DKIM

• mail: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0knd7Z8Cq4yUDNtOJN4QSGVNTM9Gk/hDSsI5al3uulrgBwxu44ramMAZSGdGVWP0+w6UjXPOsbqgbC…
• dkim: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDELOvFT9TEi1QX7zhB4l86WHUo1nN85Z3qmfgxqveNBwBvbrrc0ToKU3F0weRd37a5FCIpY6e2quSB2KLvb16Duv80i…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.sroubamatka.cz/cs/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• vrabecavrabec.cz×1
• prevodniknorem.cz×1
• netdesign.cz×1
• modernivytapeni.cz×1
• metallindovsky.cz×1
• mekrs.cz×1
• facebook.com×1
• drevostavby.eu×1
• boellhoff.cz×1
• bmkco.cz×1

Linked from (3)

• prevodniknorem.cz×1
• i-plech.cz×1
• netdesign.cz×1