essox.cz

HTML metadata

Title: ESSOX – Spotřebitelské financování
Description: Patříme mezi nejvýznamnější poskytovatele nebankovních finančních služeb. Poskytujeme úvěr na auta, financování spotřebního zboží, neúčelové hotovostní půjčky i kreditní karty pro naše klienty.
Language: cs

Technology

Server: Apache
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×2
www.googletagmanager.com×1

Social

Contact

Email

Phone

+420389010422

Registration

Registrar

REG-WEBGLOBE

Created

1998-03-05

Expires

2026-10-09 130 days left

Updated

2022-11-23

Name servers

ns1.gts.cz
ns2.gts.cz

DNS records live

NS

ns1.gts.cz
ns2.gts.cz

MX

10 smtp1.essox.cz
20 smtp2.essox.cz

TXT

MChhhN3Tsg2DcS6mh4+qAYWENRIzEecunixu460nWTAim2OQ0LZ4EmqiwmIlNm2FdgGldi6q4iT9I86EYqYy8g==
MS=C49B40595166CF9DABA21234F461CA2A400A91D7

Verified for

Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:80.188.63.38 ip4:80.188.179.6 ip4:207.45.249.160/27 ip4:207.45.243.128/27 include:spf.protection.outlook.com -all exp=expspf.essox.cz

strict (-all)

DMARC

v=DMARC1; p=quarantine; adkim=r; aspf=r; fo=1; rua=mailto:dmarc_rua@essox.cz; ruf=mailto:dmarc_ruf@essox.cz; pct=100; ri=604800

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1704nBj/4IlgBahdHHmvuPA5pTZMpBVgwNo/mb76uvU7d15TbBrAPQOwQnSz9/lT7kB8mo3VDiR59g…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+OO4AJIvXZVma5vC0sg3+3HHtrX1qD3bpc2KZUqpXnb+3UNxxnYuHhqseBd/VUyMYKg6Zoi4RTrxd…

selectors probed

Certificate (current)

R12

from 2026-05-12 to 2026-08-10

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.essox.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://www.essox.cz; style-src 'self' 'nonce-D3JQCb2IR26xT33s0fj+rg==' fonts.googleapis.com fonts.gstatic.com; style-src-attr 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; script-src 'nonce-D3JQCb2IR26xT33s0fj+rg==' 'strict-dynamic'; connect-src 'self' 'nonce-D3JQCb2IR26xT33s0fj+rg==' https://*.doubleclick.net https://*.smartlook.cloud https://*.smartlook.com *.youtube.com *.facebook.com *.google-analytics.com https://connect.facebook.net *.googletagmanager.com; worker-src blob:; frame-src 'self' *.youtube.com *.facebook.com *.google-analytics.com https://connect.facebook.net; child-src *.youtube.com *.facebook.com *.google-analytics.com https://*.smartlook.cloud https://*.smartlook.com https://connect.facebook.net; img-src 'self' *.youtube.com *.facebook.com *.google-analytics.com *.googletagmanager.com data:; upgrade-insecure-requests; block-all-mixed-content;
strict-transport-security: max-age=31536000; includeSubDomains