kupbilet.pl

.pl crawl

First seen 2026-05-24 · Last seen 2026-05-31 · ok HTTP/1.1 200 4096 ms crawled 2026-05-29

US · 35.201.68.158 · AS396982 Google LLC

Reputation 100/100

sector tech type homepage

HTML metadata

Title: KupBilet.pl
Language: en

Technology

Server: Apache
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×2
www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS

ns-cloud-c1.googledomains.com
ns-cloud-c2.googledomains.com
ns-cloud-c3.googledomains.com
ns-cloud-c4.googledomains.com

MX

0 kupbilet-pl.mail.protection.outlook.com
200 kb3ovh10.fincerto.com

TXT

onet-domain-verification=6ee215007877321fdc7b39cf9a0298687ce31dbb2477ba11d3cc94e43fef51e7

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx ip4:57.128.198.167 ip4:51.255.199.91 ip6:2001:41d0:302:2000::1b72 ip6:2001:41d0:601:1100::11e6 include:spf.protection.outlook.com include:47672187.spf08.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:postmaster@kupbilet.pl; ruf=mailto:postmaster@kupbilet.pl; fo=1; pct=100; adkim=r; aspf=r

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8CRh0tFnlBd0GmSn3I/PnHQa8yJgjdr+Pq+flm2OXdRrkhn1FA3KKQCFTHQ/bccv+K9+DBtyNKNmNBWtKYc…
dkim: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupxIC+tnBbH0wEv5pLkmtb5xq2ypmwVjx+a0/iSPIlUe0leIyqSleYRJ0Hz0ssQTtD99xAJw1uO2yzUUtqBMG…

selectors probed

Certificate (current)

from 2026-03-02 to 2026-05-31

Expires in 0 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.kupbilet.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' zoo.waw.pl zaksa.pl kkwloclawek.pl gtk.gliwice.pl tzostrovia.pl mks-kalisz.pl *.kupbilet.com *.bkssa.pl bkssa.pl wertui.pl *.wertui.pl *.stssanok.pl stssanok.pl;
strict-transport-security: max-age=31536000 ; includeSubdomains;