dacia.pl — domain check, WHOIS, DNS & reputation

HTML metadata

Title

DACIA Polska - Producent samochodów osobowych i dostawczych

Description

Odkryj modele Dacia: Bigster, Duster, Spring, Jogger i Sandero. Sprawdź oferty finansowania i pakiety serwisowe oraz znajdź najbliższego dealera.

Language

pl-PL

Canonical

https://www.dacia.pl/

Translations

pl

Technology

CDN: Amazon CloudFront
Server: nginx

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (3)

cdn.group.renault.com×59
www.google-analytics.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

anna.renault.fr
xenia.renault.fr

MX

10 mx1.hc1506-8.eu.iphmx.com
10 mx2.hc1506-8.eu.iphmx.com

TXT

hTT45fF9VY3lKGzBtuJoEiHE0/IjHZmwrhN+qoxidF0H6FKCuSouI3UyhySsFaFNHeBexTCqiWi65zs/mxIVGg==
ztKU/A9MGKm7auitQ+17yaytd5VaEm9ZbIKb/Cr6yJ2M1SDJEn2o+NqVMLX3B8iDE87ASECxFZjSe0bXJvAiNQ==

Verified for

Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx include:spf.protection.outlook.com include:_spf.salesforce.com include:_spf.emaillabs.net.pl exists:%{i}.spf.hc1506-8.eu.iphmx.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:8861c14b@inbox.eu.redsift.cloud,mailto:mb2glhd4@ag.dmarcian.eu; ruf=mailto:8861c14b@inbox.eu.redsift.cloud; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600

policy: reject (enforced) · sp=reject

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxo7caWpsE7Gl3wnYCsbYteRMUVh4hb3fiAJt4qkB/+Of9tFTtGIU2mj/A8nCic7FMLBDq8z7Rjff6…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-01-28 to 2027-02-27

Expires in 271 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.dacia.pl/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src data: 'unsafe-inline' 'unsafe-eval' https:;base-uri 'self';frame-ancestors 'self' ;img-src data: https: blob:;font-src data: https:;media-src https: blob:;connect-src https: wss: http:;script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:;style-src data: 'unsafe-inline' https:;child-src https: data: blob:;form-action https:;object-src 'none';
strict-transport-security: max-age=2592000

Links to (8)

Linked from (1)

psmm.pl×1