indexo.dev

zsps-opava.cz

.cz crawl

First seen 2026-06-01 · Last seen 2026-06-02 · ok HTTP/1.1 200 594 ms crawled 2026-06-02

CZ · 37.235.104.239 · AS39392 SH.cz s.r.o.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Základní škola a Praktická škola, Opava | Základní škola a Praktická škola Opava
Description
Základní škola a Praktická škola, Opava, Slezského odboje 5, příspěvková organizace
Language
cs

Open Graph

url
https://www.zsps-opava.cz/cs/

Technology

Server
nginx
jQuery
3.3.1 known XSS (<3.5)
Stack
PHP

Third-party hosts loaded (2)

  • cdn.arsy.cz×3
  • api.mapy.cz×1

Contact

Phone

DNS records live

NS
  • ns1.websupport.cz
  • ns2.websupport.cz
  • ns3.websupport.eu
MX
Show 7 MX records
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 10 mailin1.zsps-opava.cz
  • 100 mailin2.zsps-opava.cz
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Google
  • Microsoft 365

Email authentication weak

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-04-09 to 2026-07-08
Expires in 36 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://www.zsps-opava.cz/cs/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • weak content type protection
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN http://127.0.0.1
x-content-type-options
nosniff, nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.arsy.cz http: https: https://cdn.jsdelivr.net; frame-ancestors 'self' https://www.facebook.com/ https://www.messenger.com/ https://*.paypal.com https://*.paypalobjects.com http://127.0.0.1; frame-src 'self' https://*.bakalari.cz https://*.paypal.com https://*.paypalobjects.com https://www.google.com https://eu.zonerama.com/ https://maps.google.com https://www.zbozi.cz https://www.facebook.com/ https://www.googletagmanager.com/ https://cdn.jsdelivr.net https://widget.packeta.com https://backup.widget.packeta.com https://maps.gls-czech.cz https://c.imedia.cz https://td.doubleclick.net https://c.seznam.cz https://cz.im9.cz https://pi-test.sagepay.com https://z.im9.cz https://*.imedia.cz https://b2c.cpost.cz https://*.dpd.cz *.youtube.com https://www.youtube-nocookie.com https://*.inpost.pl; img-src 'self' data: blob: https://*.heureka.cz https://*.arsy.cz https://*.gstatic.com https://*.googleapis.com https://*.pay

Links to (11)

Linked from (1)