ahop.pl

.pl crawl dns

First seen 2026-05-24 · Last seen 2026-05-31 · ok HTTP/1.1 200 700 ms crawled 2026-05-29

US · 172.67.162.41 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title

Grupa American Heart of Poland

Language

pl-PL

Generator

Elementor 4.1.0; features: e_font_icon_svg, additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-swap

Canonical

https://ahop.pl/index.html

Feeds

Technology

CDN: Cloudflare
CMS: WordPress
jQuery: 1.12.4 known XSS (<3.5)

Analytics

Google Tag Manager

Fonts

Font Awesome
Google Fonts

Third-party hosts loaded (10)

ajax.googleapis.com×3
cdnjs.cloudflare.com×3
fonts.googleapis.com×3
cdn-cookieyes.com×2
use.fontawesome.com×2
www.googletagmanager.com×2
code.jquery.com×1
klinikiserca.pl×1
www.facebook.com×1
www.google.com×1

Social

Contact

Phone

+4801502302

DNS records live

NS

diana.ns.cloudflare.com
ian.ns.cloudflare.com

MX

10 mx3.ahop.pl
20 mx4.ahop.pl

TXT

mojecertpl-site-verification-IpoPc4B7FMYz2xDBMwHnNVXaCCAynpOo

Verified for

Atlassian
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a:ppsmaster.ahop.pl a mx ip4:89.25.219.172/30 ip4:89.25.219.172 include:spf.protection.outlook.com ip4:185.27.52.113 -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:ctiv0jzm@ag.eu.dmarcian.com, mailto:dmarc@ahop.pl; ruf=mailto:ctiv0jzm@fr.eu.dmarcian.com, mailto:dmarc@ahop.pl; fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAqzGe6hK9hkuX18BclDbM7zgDbLwZZg7nGx1I6huNZeFLtzD7edtXw6EELWQdUnsz6sJ7N8h9/8jV…

selectors probed

Certificate (current)

WE1

from 2026-04-21 to 2026-07-20

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://ahop.pl/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")