arlek.pl

HTML metadata

Title

Profesjonalne strony internetowe od 2500 zł netto

Description

Profesjonalne strony internetowe od 2500 zł netto. Ponad 3000 realizacji w 30+ branżach. Hosting i domena w cenie. Agencja internetowa z Katowic.

Language

pl-PL

Canonical

https://arlek.pl/

Translations

pl

Open Graph

url: https://arlek.pl/
title: Profesjonalne strony internetowe od 2500 zł netto
locale: pl_PL
site name: Arlek.pl
description: Profesjonalne strony internetowe od 2500 zł netto. Ponad 3000 realizacji. Agencja internetowa z Katowic.

Technology

CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

Phone

+48793784145

Address

Dobrego Urobku 35, 40-810, Katowice, śląskie, PL

DNS records live

NS

ns1.dhosting.pl
ns2.dhosting.pl

MX

10 mx-1.dpoczta.pl
10 mx-2.dpoczta.pl

Email authentication partial

SPF: v=spf1 include:_mail.dhosting.pl -all
strict (-all)
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:dmarc-raports@dhosting.pl
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-13 to 2026-07-12

Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://arlek.pl/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-aPSnYZDT5S88p+Y7ZV8qQw==' data: https://cdnjs.cloudflare.com https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net; frame-ancestors 'self' https://responsivetesttool.com https://*.responsivetesttool.com https://responsivedesignchecker.com ht
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin