dhl24.com.pl
HTML metadata
Technology
- Server
- nginx
- jQuery
- 3.4.1 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- OneTrust
Third-party hosts loaded (3)
- cdn.cookielaw.org×1
- stackpath.bootstrapcdn.com×1
- www.googletagmanager.com×1
DNS records live
- NS
-
- ns01.brandshelter.com
- ns02.brandshelter.net
- MX
-
- 10 mx.dhl24.com.pl
- TXT
-
41bcd44fedec633458216d52deb77f3601676d4ecea5cab750bde5c38721f66d99433c65e0ee5af6a033c32e374433b9b2eee2c3de51bccccec29cc9513bc8c9aba5ad97ed2f094dd3c6af7405fe7a6b4faa6184aeadaca0b19f210b36873
Email authentication strong
- SPF
-
v=spf1 a mx ip4:85.14.94.105 ip4:85.14.94.107 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; fo=0; rua=mailto:dmarc-reports@dhl.com;policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
Certum DV TLS G2 R39 CA
Expires in 115 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests; default-src 'self' wss://*.hotjar.com *.dhl24.com.pl *.dhl.pl; img-src 'self' x.bidswitch.net r.casalemedia.com id5-sync.com matching.ivitrack.com exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com sync-criteo.ads.yieldmo.com e1.emxdgt.com dpm.demdex.net *.criteo.com region1.analytics.google.com *.bing.com *.clarity.ms cdn.cookielaw.org www.google.at www.google.co.uk www.google.cz www.google.de www.google.fi www.google.it www.google.nl www.google.se optimize.google.com www.google.com www.google.pl www.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.fbcdn.net *.openstreetmap.org dhlpoland.pl *.hotjar.com *.hotjar.io *.tradedoubler.com *.smartadserver.com *.adform.net *.push-ad.com push-ad.com adservice.google.com *.getsitecontrol.com push.dhl24.com.pl plugin.management *.plugin.management analyst.services *.analyst.services *.amazon- strict-transport-security
max-age=15768000; includeSubDomains
Links to (6)
- dhl.com×1
- dhl.com.pl×1
- dhl.pl×1
- dhlbiznes.pl×1
- dhlecommerce.pl×1
- dhlparcel.pl×1