exitshop.cz

.cz crawl

First seen 2026-05-21 · Last seen 2026-05-30 · ok HTTP/1.1 200 1455 ms crawled 2026-05-27

CZ · 78.24.11.200 · AS43541 VSHosting s.r.o.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Exitshop - váš e-shop 2.0
Description: Vstupte do Exitshopu a můžete ihned vytvářet jednostránkové i klasické velké e-shopy a prodávat.
Language: cs

Open Graph

url: https://www.exitshop.cz/
title: Exitshop - váš e-shop 2.0
description: Vstupte do Exitshopu a můžete ihned vytvářet jednostránkové i klasické velké e-shopy a prodávat.

Technology

Server: nginx
jQuery: 1.11.0 known XSS (<3.5)
Stack: CodeIgniter

Analytics

Google Tag Manager

Ads

Google Ads
Google Ads (DoubleClick)

Fonts

Google Fonts

Third-party hosts loaded (6)

c.imedia.cz×1
fonts.googleapis.com×1
googleads.g.doubleclick.net×1
www.facebook.com×1
www.googleadservices.com×1
www.googletagmanager.com×1

Social

Contact

Email

info@exitshop.cz

Registration

Registrar

REG-GRANSY

Created

2013-05-08

Expires

2027-05-07 340 days left

Updated

2022-10-05

Name servers

ns2.gransy.com
ns3.gransy.com
ns4.gransy.com
ns5.gransy.com
ns.gransy.com

DNS records live

NS

ns.gransy.com
ns2.gransy.com
ns3.gransy.com
ns4.gransy.com
ns5.gransy.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Email authentication partial

SPF

v=spf1 include:_spf.google.com include:amazonses.com mx a ip4:217.198.123.13/32 include:spf.affilbox.cz ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none; pct=100; rua=mailto:bounce@exitshop.cz;

policy: none (monitoring only) · sp=none

DKIM

mail: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfjQhnqEw9sSjKHCsOMQ6Rn6KF2beGqoxBCkjRbZ9ng/sbnTAitdV3nbYd22n0k2E9lvVDnIMnkIxQ69cSxS…

selectors probed

Certificate (current)

R12

from 2026-05-16 to 2026-08-14

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.exitshop.cz/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: http://localhost:2014 http://127.0.0.1:2014; frame-src 'self' https:;
strict-transport-security: max-age=31536000; includeSubDomains