bossa.pl

.pl crawl dns

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 353 ms crawled 2026-05-30

PL · 195.8.97.201 · AS197457 Dom Maklerski Banku Ochrony Srodowiska SA

Reputation 100/100

Classifying

HTML metadata

Title: Strona główna | Dom Maklerski Banku Ochrony Środowiska
Description: Dom Maklerski Banku Ochrony Środowiska to najlepsze biuro Maklerskie i niskie prowizje. Notowanie, Inwestycje, Szkolenia. Otwórz rachunek
Language: pl
Canonical: https://bossa.pl/

Open Graph

url: https://bossa.pl/homepage
title: Strona główna
site name: Dom Maklerski Banku Ochrony Środowiska
determiner: Strona główna

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.googletagmanager.com×1
www.gstatic.com×1

Social

Contact

Phone

801104104

DNS records live

NS

ns.bossa.pl
ns.dmbos.com.pl
ns2.bossa.pl
ns2.dmbos.com.pl

MX

10 vgw-01.bossa.pl
20 vgw-02.bossa.pl

TXT

mojecertpl-site-verification-U9FDDJSiEUaNaiJl0jmvohx6Aysf6W5A
d1da1589ecf8131d01f77a12c544f9e71eeeb35acdd344b765ad2e6dc882cb5

Verified for

Google

Email authentication strong

SPF: v=spf1 include:_spf.jupiter.salesmanago.pl include:spf.protection.outlook.com mx -all
strict (-all)
DMARC: v=DMARC1; p=quarantine
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

Certum DV TLS G2 R39 CA

from 2025-09-17 to 2026-09-17

Expires in 108 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://bossa.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.bossa.pl www.google.com; script-src 'self' 'unsafe-eval' *.bossa.pl www.salesmanago.pl *.salesmanago.pl www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.google-analytics.com www.gstatic.com maps.googleapis.com www.google.com unpkg.com *.clarity.ms 'unsafe-inline' *.startquestion.com *.ads-twitter.com *.facebook.net pagead2.googlesyndication.com *.bing.com *.bing.net www.youtube.com; style-src 'self' *.bossa.pl www.gstatic.com fonts.googleapis.com 'unsafe-inline' unpkg.com/tippy.js@6.3.7/dist/tippy.css www.googletagmanager.com; img-src 'self' blob: bossa.pl *.bossa.pl bossafx.pl *.bossafx.pl *.salesmanago.pl www.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net maps.googleapis.com google.com *.google.com google.pl *.google.pl google.fi *.google.fi google.dk *.google.dk google.de *.google.de google.nl *.google.nl google.ch *.google.ch google.se *.google.se google.ie *.google.ie google.co.uk *.google.co.uk www.gstatic.
strict-transport-security: max-age=31536000