budmatauto.pl

.pl crawl

First seen 2026-05-29 · Last seen 2026-05-31 · ok HTTP/1.1 200 662 ms crawled 2026-05-31

PL · 94.152.156.62 · AS29522 Cyber_Folks S.A.

Reputation 100/100

Classifying

HTML metadata

Title: Budmat Auto
Description: Budmat Auto
Language: pl

Open Graph

url: https://budmatauto.pl
title: Budmat Auto
locale: PL
description: Budmat Auto

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (5)

ireland.apollo.olxcdn.com×5
lh3.googleusercontent.com×2
www.freeprivacypolicy.com×1
www.google.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.domena.pl
ns2.domena.pl
ns3.domena.pl

MX

10 mx01.agnat.pl

Email authentication strong

SPF: v=spf1 include:_spf.mlsend.com include:spf.agnat.pl ~all
softfail (~all)
DMARC: v=DMARC1; p=reject
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-15 to 2026-08-13

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://budmatauto.pl/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.freeprivacypolicy.com https://connect.facebook.net; frame-src https://www.googletagmanager.com https://www.google.com https://www.google.com/recaptcha/ https://www.google.com/maps/embed https://www.youtube.com https://youtu.be; img-src 'self' data: https://*.olxcdn.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://lh3.googleusercontent.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com; connect-src 'self' https://www.google.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.freeprivacypolicy.com https://www.facebook.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (13)

Linked from (1)

wisla-plock.pl×1