glebokioddech.pl

HTML metadata

Title

Głęboki Oddech – Adamed – Ogólnopolski Program Profilaktyki Chorób Układu Oddechowego

Language

pl-PL

Generator

WordPress 6.9.4

Canonical

https://glebokioddech.pl/

Feeds

Technology

Server: nginx
CMS: WordPress 6.9.4
PHP: 8.3.31 security-only
jQuery: 3.7.1
Stack: PHP

Analytics

Google Analytics
Google Tag Manager

Fonts

Font Awesome
Google Fonts

Third-party hosts loaded (8)

fonts.googleapis.com×4
use.fontawesome.com×4
www.googletagmanager.com×4
maps.googleapis.com×3
fonts.gstatic.com×2
maps.gstatic.com×2
www.google-analytics.com×2
gmpg.org×1

Social

Contact

Phone

2025-12-11 12

DNS records live

NS

ns1.domena.pl
ns2.domena.pl
ns3.domena.pl

MX

10 mx01.agnat.pl

TXT

h7g4z7nk54rdf753dlvt4zg4lbx14z7v

Email authentication strong

SPF: v=spf1 include:spf.agnat.pl ~all
softfail (~all)
DMARC: v=DMARC1; p=reject
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

GoGetSSL RSA DV CA

from 2026-03-23 to 2026-10-08

Expires in 128 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://glebokioddech.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests;
strict-transport-security: max-age=63072000; includeSubDomains; preload, max-age=15768000; includeSubDomains
cross-origin-opener-policy: same-origin, unsafe-none
cross-origin-embedder-policy: require-corp, unsafe-none; report-to='default'
cross-origin-resource-policy: same-origin, cross-origin