indexo.dev

teovia.cz

.cz crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 1127 ms crawled 2026-06-01

DE · 49.13.40.93 · AS24940 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Teo via nadační fond
Language
cs

Technology

Server
nginx
jQuery
1.11.0 known XSS (<3.5)
Stack
PHP
Fonts
  • Font Awesome
  • Google Fonts
Social widgets
  • YouTube Embed
Third-party hosts loaded (8)
  • o1.agendafarnosti.cz×22
  • fonts.googleapis.com×3
  • cdn.jsdelivr.net×1
  • forms.agendafarnosti.cz×1
  • translate.google.com×1
  • use.fontawesome.com×1
  • www.facebook.com×1
  • www.youtube.com×1

Social

Registration

Registrar
REG-INTERNET-CZ
Created
2021-04-01
Expires
2027-03-31 301 days left
Updated
2021-04-01
Name servers
  • ns.forpsi.cz
  • ns.forpsi.it
  • ns.forpsi.net

DNS records live

NS
  • ns.forpsi.cz
  • ns.forpsi.it
  • ns.forpsi.net
MX
Show 6 MX records
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 10 mxavas.forpsi.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Google

Email authentication weak

SPF
not published
DMARC
v=DMARC1; p=none; rua=mailto:1arvthv5i8@dmarc-reports.ecomailapp.com; fo=1
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-04-27 to 2026-07-26
Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://teovia.cz/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Referrer Policy
Header values
permissions-policy
unload=(self "https://www.facebook.com" "https://web.facebook.com" "https://staticxx.facebook.com" "https://static.xx.fbcdn.net")
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://booking.previo.app https://*.agendafarnosti.cz https://*.agendafarnosti.sk https://*.gemeindeagenda.at https://donator.cz https://*.fontawesome.com https://cirkevnistatistiky.cz https://js.stripe.com https://*.vaticannews.va https://*.jsdelivr.net https://*.cloudflare.com https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.facebook.net https://*.facebook.com https://*.cloudflareinsights.com; frame-ancestors 'self' https://*.agendafarnosti.cz https://agendafarnosti.cz https://*.agendafarnosti.sk https://agendafarnosti.sk https://*.gemeindeagenda.at https://gemeindeagenda.at https://cirkevnistatistiky.cz;
strict-transport-security
max-age=63072000; includeSubDomains; preload, max-age=31536000
cross-origin-opener-policy
same-origin
cross-origin-embedder-policy
unsafe-none
cross-origin-resource-policy
cross-origin

Links to (22)

Linked from (1)