atat.pl — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Sklep dla Firm | Zakupy do Biura B2B | Dobre Ceny | Hurtownia Online - ATAT
Description: ATAT ➤ Sklep dla firm ⭐ Wygodne zakupy online do biura, firmy ✔️ Zaopatrzenie sklepów ✔️ Zakupy B2B ✔️ Wsparcie Call Center ✔️ Dobre ceny i rabaty ⭐ Zobacz!
Language: pl
Canonical: https://atat.pl/

Technology

CDN: Cloudflare
CMS: Gatsby
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×1
groot.mailerlite.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+48%20508036261

DNS records live

NS

janet.ns.cloudflare.com
sri.ns.cloudflare.com

MX

10 mail.at-krotoszyn.pl

TXT

mailerlite-domain-verification=2c4a2194fd96dfbebe86354edf7a7bd069fd0142

Verified for

Google

Email authentication strong

SPF

v=spf1 mx a include:_spf.mlsend.com include:at-krotoszyn.pl ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;rua=mailto:postmaster@atat.pl;

policy: reject (enforced)

DKIM

dkim: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlTjm6pJaHPxGxUCn5dLx05KHPqY+om/v5nYol/tjLODzTFaFvMKQNh0qyGaukH639uSCCUGd9ZLt82kLGWUPBgDMVa/6…

selectors probed

Certificate (current)

WE1

from 2026-05-21 to 2026-08-19

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://atat.pl/

present

content-security-policy
x-frame-options
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src-attr 'unsafe-hashes' 'sha256-9U5/Zy+l9/0L5X8UE2g4hpoGDqKDquW96DUw7GgH9n8=' 'sha256-1jAmyYXcRq6zFldLe/GCgIDJBiOONdXjTLgEFMDnDSM='; font-src *.easypack24.net *.sysadvisors.pl *.bing.com *.virtualearth.net opineo.pl *.opineo.pl *.dotpay.pl *.payu.com *.cloudflare.com *.mailerlite.com *.fontawesome.com https://fonts.bunny.net fonts.gstatic.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com facebook.net *.dotpay.pl *.facebook.com *.przelewy24.pl sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardi

Links to (4)

Linked from (1)

at-krotoszyn.pl×1