diag.pl

HTML metadata

Title: Diagnostyka Laboratoria Medyczne | Badania Krwi | Wyniki on-line
Description: Badania profilaktyczne bez skierowania, laboratoria w całej Polsce, wyniki on-line. Badania laboratoryjne krwi, badania nietolerancji, genetyczne i badania w ciąży, pobrania w domu.
Language: pl
Canonical: https://diag.pl/pacjent/

Open Graph

url: https://diag.pl/pacjent/
title: Diagnostyka Laboratoria Medyczne | Badania Krwi | Wyniki on-line
locale: pl
site name: Pacjent - Diagnostyka Laboratoria Medyczne
description: Badania profilaktyczne bez skierowania, laboratoria w całej Polsce, wyniki on-line. Badania laboratoryjne krwi, badania nietolerancji, genetyczne i badania w ciąży, pobrania w domu.

Technology

Server: Google
CMS: WordPress
JS framework: Next.js

Analytics

Google Analytics
Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (4)

www.googletagmanager.com×2
aggregator.eu.usercentrics.eu×1
app.eu.usercentrics.eu×1
www.google-analytics.com×1

Social

DNS records live

NS

dns.diag.pl
dns2.diag.pl
dns3.diag.pl

MX

10 mx2.diag.pl
5 mx1.diag.pl

TXT

Show 7 TXT records

mojecertpl-site-verification-zmFKRRz7gp4Fv7UCikidJQCl7MhjUfrp
bw=KXCM6bFMR9sCSSr62qTxvvYWnyRfkHGGhcFn6+l3FHnL
cc6e355af09482534af21cdd9a7e7de26697967cd9c6d5465ffb23a04151e84
firebase=apps-for-dia-staging
MS=E45F07251A802A95AFD8C39E934D3B898E7FDF65
identityserverappstaging.azurewebsites.net
00D7Q000004RlnJ=1TBQs00000000rF

Verified for

Apple
Atlassian
GlobalSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:91.223.168.139 ip4:91.223.168.13 ip4:91.223.168.146 include:spf.protection.outlook.com include:_spf.jupiter.salesmanago.pl mx -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@diag.pl

policy: reject (enforced)

DKIM

default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYjnwrGbqnV+dLL8l9C5hRf3zpb3FE9K+J7aeF0i4S2CmQSSQ7taNaWqj9Yg2OAXDpf1D2fyVdhkWWuR83dP…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2pwSFlSxWNinp3Y891O044xgYczF7piNgGJtJkuVVwyzaokhUOxbWdolRS/X10MvdKPhSMOlxzC7C…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Kc4wduhu8VuWnfpsslgvfXrtawpVw6dLab97GtPgIHk5Gx3WdC0MEjSVwzqdVhZG+qbK8iHTmEj9W+b8…

selectors probed

Certificate (current)

Certum Extended Validation CA SHA2

from 2025-09-03 to 2026-09-03

Expires in 95 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://diag.pl/pacjent/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: sync-xhr=(), geolocation=(), interest-cohort=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src * data: blob:;