ispro.pl
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress 6.9.1
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- gmpg.org×1
- www.google.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- anuj.ns.cloudflare.com
- elisabeth.ns.cloudflare.com
- MX
-
Show 7 MX records
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 10 aspmx4.googlemail.com
- 10 aspmx5.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
Email authentication partial
- SPF
-
v=spf1 ip4:94.152.164.250 include:aspmx.googlemail.com include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarcreports@ispro.pl; fo=1; pct=100;policy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2XaWYZpcUT8Z1NPsVf7pHl/yYSJOvpvZXLfKN4bswPAYnuY53LXfYT5d3B8VwyQyJI9pkffibyPAU…
selectors probed - google:
Certificate (current)
WE1
Expires in 55 days
HTTP security headers
- present
-
- content-security-policy
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src data: blob: 'self' https://s.w.org https://secure.gravatar.com https://www.google.pl https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.gstatic.com https://youtu.be *.google.com https://youtu.be https://maps.googleapis.com https://*.google-analytics.com 'unsafe-inline' *.ispro.pl www.ispro.pl 'unsafe-eval'; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://recaptcha.google.com https://www.google.com/recaptcha/; script-src 'self' *.google.com https://www.googletagmanager.com https://*.gstatic.com https://www.google.com https://apis.google.com https://www.google-analytics.com https://maps.googleapis.com 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://cdn.scite.ai https://fonts.googleapis.com https://*.gstatic.com https://*.wp.com data:;