kross.pl

HTML metadata

Title: KROSS - sklep rowerowy online. Kupuj bezpośrednio od producenta rowerów KROSS | KROSS
Description: Emocje podczas jazdy na rowerze to nasza główna inspiracja do działania . Rozumiemy i dzielimy je z naszymi klientami, ludźmi pełnymi pasji do kolarstwa . Od projektantów, przez produkcję, po mechaników - wszyscy jesteśmy zaangażowani w tworzenie rowerów KROSS
Language: pl

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (5)

cdn.thulium.com×1
consent.cookiebot.com×1
static.payu.com×1
trustmate.io×1
www.googletagmanager.com×1

Social

Contact

Phone

297521100

DNS records live

NS

coraline.ns.cloudflare.com
zod.ns.cloudflare.com

MX

0 kross-pl.mail.protection.outlook.com

TXT

Show 4 TXT records

hslw9d0gcqwr8f7m2vc8w7nckln6sngc
kymsql18z6y6h3l4hhz3j1v3jdyk5b5j
solarwinds-service0desk-verification=1144e6ceffe553ef7f6cc1230f83b5ba
5ea48bbf82804b751f33b5754a1c1aa0

Verified for

Atlassian
Google
Meta

Email authentication partial

SPF

v=spf1 include:spf.emailsignatures365.com include:spf.protection.outlook.com include:_spf.jupiter.salesmanago.pl include:_spf.salesforce.com include:_spf.samanage.com ip4:80.72.35.34/32 ip4:195.205.132.226 ip4:52.138.216.130 ip4:80.72.35.35/32 ip4:37.109.55.169 include:_spf.emaillabs.net.pl include:_spf.spamexperts.com -all

strict (-all)

DMARC

v=DMARC1;p=none;pct=0;rua=mailto:dmarc@vercom.pl

policy: none (monitoring only) · pct=0

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCyFavQvwD/ouiLuaxHnhMQIZwKi8xKZn9LRDHvSTSjq9A8VpUmCDho2v9CaMJh4h22KA9S8evJDqo66MNbOT…

selectors probed

Certificate (current)

WE1

from 2026-05-11 to 2026-08-09

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://kross.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://geowidget.easypack24.net *.fontawesome.com kross.pl https://trustmate.io https://cdn.trustmate.io https://cdn.thulium.com https://static.payu.com analytics.tiktok.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://ewniosek.credit-agricole.pl https://raty.aliorbank.pl https://test.raty.internet.alior.corp:33443 https://pc.pkoleasing.pl/ https://stpc.pkoleasing.pl/ https://wniosek.eraty.pl https://irata.bnpparibas.pl/eshop-form/1a.page https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com
strict-transport-security: max-age=36000