Cezpolska.pl Summary

Content-Security-Policy: default-src 'self' media.cez.cz http://media.cez.cz https://mlab.blob.core.windows.net https://platform.motionlab.cz https://my.personalizard.com;font-src 'self' fonts.gstatic.com data: *.typekit.net script.hotjar.com fonts.gstatic.com;connect-src 'self' analytics.monkeytracker.cz http://cez.lavamax.cz www.cez.cz *.hotjar.com http://graylog.hotjar.com:12080 ws://ws1.hotjar.com www.googletagmanager.com https://cezonline.cez.cz *.hotjar.io https://www.facebook.com stats.g.doubleclick.net www.google-analytics.com clc.cez.cz wss://*.hotjar.com optimize.google.com https://ruian.fg.cz *.licdn.com *.cezdistribuce.cz *.bezstavy.cz https://ruian.fg.cz;script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com maps.google.com *.googleapis.com www.googletagmanager.com ssl.google-analytics.com www.google-analytics.com analytics.monkeytracker.cz www.googleadservices.com c.imedia.cz https://www.cez.cz https://connect.facebook.net http://track.adform.net https://track.adform.net https://www.facebook.com tagmanager.google.com https://t.leady.com *.hotjar.com *.cookiebot.com *.azureedge.net https://clc.cez.cz https://clc-test.cez.cz https://skk.erecruiter.pl https://googleads.g.doubleclick.net cdn.optimizely.com optimize.google.com https://www.gstatic.com/charts/loader.js https://www.o2knihovna.cz https://www.seznam.cz/rs/static/rc.js *.licdn.com *.cezdistribuce.cz *.adform.net *.bezstavy.cz;form-action 'self' *.o2.cz cezonline.cez.cz https://eportal.cezdata.cz http://cez.lavamax.cz www.cez.cz https://ekolo.cz https://www.facebook.com *.payu.com *.payu.cz https://merch-prod.snd.payu.com http://merch-prod.snd.payu.com http://www.ete.cz http://www.aktivnizona.cz http://aktualne.cez.cz http://internikalkulacky.cez.cz http://www.telcoproservices.cz https://kdejinde.jobs.cz http://www.ned.cez.cz http://ned.cez.cz https://kissdesk.o2.cz https://dip.cezdistribuce.cz;frame-src 'self' *.o2.cz www.youtube-nocookie.com www.youtube.com https://www.youtube.com www.vimeo.com *.doubleclick.net www.google.com www.google.cz google.com google.cz https://www.google.com https://www.google.cz https://info.cez.bg www.facebook.com c.imedia.cz *.hotjar.com *.azureedge.net tpc.googlesyndication.com optimize.google.com https://stream360.pl https://www.o2knihovna.cz *.cezdistribuce.cz https://platform.motionlab.cz https://my.personalizard.com *.cookiebot.com *.cezdistribuce.cz;child-src 'self' *.o2.cz www.youtube-nocookie.com www.youtube.com https://www.youtube.com www.vimeo.com *.doubleclick.net www.google.com www.google.cz google.com google.cz https://www.google.com https://www.google.cz https://info.cez.bg www.facebook.com c.imedia.cz *.hotjar.com *.azureedge.net tpc.googlesyndication.com optimize.google.com https://stream360.pl https://www.o2knihovna.cz *.cezdistribuce.cz https://platform.motionlab.cz https://my.personalizard.com *.cookiebot.com *.cezdistribuce.cz;frame-ancestors 'self' https://www.youtube.com;img-src 'self' blob: data: *.cez.cz *.gstatic.com *.googleapis.com placeholdit.imgix.net www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net  *.imedia.cz *.google.com *.google.cz https://www.facebook.com http://media.cez.cz  https://t.leady.com http://via.placeholder.com http://ovzdusi.orgrez.cz ssl.google-analytics.com android-webview-video-poster pagead2.googlesyndication.com www.google.de track.adform.net optimize.google.com system.erecruiter.pl http://gdg.symbiodigital.com *.linkedin.com *.adsymptotic.com *.googleusercontent.com https://mlab.blob.core.windows.net https://platform.motionlab.cz *.seznam.cz *.adform.net https://img.kuki.cz *.bezstavy.cz;style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz http://bilatechnika.cez.cz tagmanager.google.com *.typekit.net  optimize.google.com https://skk.erecruiter.pl www.cez.cz *.bezstavy.cz
Content-Security-Policy: frame-ancestors 'self'
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: accelerometer 'none'; autoplay 'self'; camera 'none'; geolocation 'self'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; sync-xhr 'self'; usb 'none';
Expect-CT: max-age=86400
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Cache-Control: no-store, no-cache
Pragma: no-cache
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
x-encoded-content-encoding: gzip