gotoma.pl

HTML metadata

Title: Aplikacje, strony i sklepy internetowe
Description: Tworzymy dedykowane aplikacje webowe, mobilne, sklepy i strony internetowe. Integrujemy ERP/WMS i platformy B2B, automatyzując procesy w firmach
Language: pl-PL
Generator: WordPress 7.0
Canonical: https://gotoma.pl/

Open Graph

url: https://gotoma.pl/
title: Aplikacje, strony i sklepy internetowe
locale: pl_PL
site name: GOTOMA Software House
description: Tworzymy dedykowane aplikacje webowe, mobilne, sklepy i strony internetowe. Integrujemy ERP/WMS i platformy B2B, automatyzując procesy w firmach

Technology

Server: nginx
CMS: WordPress 7.0

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.google.com×1
www.googletagmanager.com×1

Contact

Email

office@gotoma.pl

Phone

7343587882

DNS records live

NS

ns1.nazwa.pl
ns2.nazwa.pl
ns3.nazwa.pl

MX

0 gotoma-pl.mail.protection.outlook.com

Verified for

1Password
Anthropic
Google

Email authentication strong

SPF

v=spf1 mx a include:spf.protection.outlook.com include:gotomash.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; pct=100; adkim=s; aspf=s

policy: quarantine · sp=quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrB7Xo25JKx13+hOfhFyH5eet+Dxgy/s0sy2Gwg8R3r8mghA6LvsKcxzXbSR4bkMcF++F5DlnI/xXM…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3CFE+MG64myCQPz/MAjGvs09xfeJEXAV12tdaebZ4I+SsWL19lKMAv6IjqzQzsIJ8XHWBRIDkVwZY…

selectors probed

Certificate (current)

nazwaSSL DV TLS G2 E29 CA

from 2026-04-28 to 2026-11-01

Expires in 148 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://gotoma.pl/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google-analytics.com https://www.googletagmanager.com https://fonts.googleapis.com www.fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://consent.cookiebot.com https://consentcdn.cookiebot.com https://imgsct.cookiebot.com https://secure.gravatar.com https://*.wp.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google.com https://apis.google.com https://google-analytics.com/ www.google-analytics.com https://region1.google-analytics.com https://consentcdn.cookiebot.com; frame-src 'self' https://www.google.com https://consentcdn.cookiebot.com;