vitkovickastredni.cz
HTML metadata
Technology
- Server
- nginx
- jQuery
- 3.5.1
- Stack
- PHP
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (5)
- cdn-vitkovice-stredni.arsy.cz×22
- fonts.googleapis.com×2
- www.arsyline.cz×2
- fonts.gstatic.com×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns.forpsi.cz
- ns.forpsi.it
- ns.forpsi.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
autodesk-domain-verification=3Jlwho1el4sVUf4N_z7jjetbrains-domain-verification=b2pvbmpa1rjy475qm5pbcet3r1lm-24l-19b
- Verified for
-
- Apple
Email authentication weak
- SPF
-
v=spf1 include:_spf.google.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 51 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
ALLOW-FROM https://www.facebook.com- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.arsy.cz http: https: https://track.adform.net https://cdn.jsdelivr.net https://www.smartsuppchat.com/ https://ads.google.com/ https://analytics.google.com/ https://sklik.cz/; worker-src 'self' http: https: https://track.adform.net https://cdn.jsdelivr.net https://www.smartsuppchat.com/ https://ads.google.com/ https://analytics.google.com/ https://sklik.cz/; frame-ancestors https://www.facebook.com/ https://www.messenger.com/; frame-src github.io https://files.netist.cz/ https://www.google.com/ https://analytics.google.com/ https://www.facebook.com/ https://www.googletagmanager.com/ https://www.smartsuppchat.com/ https://s7.addthis.com/ https://cdn.jsdelivr.net https://widget.packeta.com https://walkinto.in/ https://ads.google.com/ https://track.adform.net https://sklik.cz/ https://wlk.im/ *.youtube.com 'self'; form-action 'self' https://*.facebook.com; font-src *.gstatic.com *.typekit.net *.arsy.cz 'self'; object-src 'none'; style-src h- strict-transport-security
max-age=63072000