materacyk.pl — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Materacyk - Materace dla Dzieci
Description: Bezpieczne i certyfikowane materace dla dzieci
Language: pl

Open Graph

title: Materacyk - Materace dla Dzieci
site name: Materacyk
description: Bezpieczne i certyfikowane materace dla dzieci

Technology

CDN: Vercel
CMS: Shopify

Analytics

Google Analytics
Google Tag Manager

Ads

Meta Pixel

Third-party hosts loaded (3)

www.googletagmanager.com×2
connect.facebook.net×1
www.google-analytics.com×1

Social

Contact

Email

kontakt@materacyk.pl

Phone

+48501218009

DNS records live

NS

ns1.mysecurecloudhost.com
ns2.mysecurecloudhost.com
ns3.mysecurecloudhost.com
ns4.mysecurecloudhost.com

MX

10 mail.materacyk.pl

Email authentication partial

SPF

v=spf1 ip4:185.208.164.111 include:spf.mysecurecloudhost.com include:_spf.mlsend.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6CPCkGg8kYc7IIE/ShZp9Oya2auoh49QcZpiHKYqVU3PLfiZe82NvfuFy+GgJKlYZZJ6zqCZavFG/…

selectors probed

Certificate (current)

R12

from 2026-05-26 to 2026-08-24

Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.materacyk.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com tagassistant.google.com www.google-analytics.com googleads.g.doubleclick.net connect.facebook.net static.klaviyo.com www.google.com *.vercel-scripts.com vercel.live; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com tagassistant.google.com; img-src 'self' data: blob: cdn.shopify.com images.unsplash.com picsum.photos www.googletagmanager.com www.google-analytics.com www.google.com www.facebook.com *.facebook.com *.doubleclick.net *.klaviyo.com *.google.com *.google.pl fonts.gstatic.com *.gstatic.com; font-src 'self' fonts.gstatic.com data:; connect-src 'self' *.myshopify.com cdn.shopify.com judge.me a.klaviyo.com static.klaviyo.com www.google-analytics.com *.google-analytics.com analytics.google.com www.googletagmanager.com tagassistant.google.com *.doubleclick.net connect.facebook.net www.facebook.com *.facebook.com *.vercel-insights.com *.vercel-scripts.com vercel.
strict-transport-security: max-age=63072000
cross-origin-opener-policy: same-origin-allow-popups

Links to (3)

Linked from (1)

bezpiecznymaluch.pl×1