xpboost.cz

.cz crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 486 ms crawled 2026-06-01

CZ · 91.239.203.95 · AS60606 PRO-ZETA a.s.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: XP BOOST
Description: XP BOOST
Language: cs
Canonical: https://www.xpboost.cz

Open Graph

url: https://www.xpboost.cz
title: Úžasné ceny, skvělá chuť XP BOOST
site name: XP BOOST
description: Vyhraj s XP BOOST

Technology

Server: Apache
PHP: 8.2.31 security-only
Stack: PHP

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (6)

cdn.jsdelivr.net×8
fonts.googleapis.com×2
cdnjs.cloudflare.com×1
consent.cookiebot.com×1
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

REG-THINLINE

Created

2025-04-25

Expires

2027-04-24 325 days left

Updated

2025-08-03

Name servers

ns1.thinline.cz
ns2.thinline.cz
ns3.cesky-hosting.eu

DNS records live

NS

ns1.thinline.cz
ns2.thinline.cz
ns3.cesky-hosting.eu

MX

10 mx1d10.thinline.cz
20 mx1b20.thinline.cz

Email authentication weak

SPF: v=spf1 a include:spf.cesky-hosting.cz -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-16 to 2026-07-15

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.xpboost.cz/cs/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: fullscreen=(self), geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://kit.fontawesome.com https://use.fontawesome.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://use.fontawesome.com https://kit.fontawesome.com https://www.googletagmanager.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://use.fontawesome.com; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; frame-src 'self' http
strict-transport-security: max-age=63072000; includeSubDomains

Links to (15)

Linked from (1)

vsaxtreme.cz×1