mediraty.pl

.pl crawl

First seen 2026-05-23 · Last seen 2026-05-31 · ok HTTP/1.1 200 5925 ms crawled 2026-05-28

GB · 35.197.199.147 · AS396982 Google LLC

Reputation 100/100

sector health type homepage

HTML metadata

Title: Kredyt na leczenie. Pożyczka na zabieg. Finansowanie usług medycznych – MediRaty
Description: MediRaty – prosty system spłaty za operacje plastyczne, usługi estetyczne czy stomatologiczne. Poznaj ratalne finansowanie medycyny.
Language: pl-PL
Canonical: https://www.mediraty.pl/

Open Graph

url: https://www.mediraty.pl/
title: Mediraty
locale: pl_PL
site name: MediRaty
description: Kredyt na leczenie. Pożyczka na zabieg. Finansowanie usług medycznych. Mediraty

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

fonts.googleapis.com×3
cdn.jsdelivr.net×2
fonts.gstatic.com×1
maps.googleapis.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Phone

22 266 83 70

DNS records live

NS

charles.ns.cloudflare.com
mariah.ns.cloudflare.com

MX

10 ratalniecom.nazwa.pl

TXT

e75332155121915351179c6fa21c587dfcc5483846dfd3b22ed85e3d104c44c

Verified for

Atlassian
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 mx include:_spf.jupiter.salesmanago.pl include:spf.protection.outlook.com include:spf-de.emailsignatures365.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:it@mediraty.pl

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwvVw+S3j0iUOHav7MqPvl8qzzrW6AwpDeVqlDppyOsNeJrOnhEO/CfLqmJIkxun2tALU+vxsLdaql…

selectors probed

Certificate (current)

R12

from 2026-04-12 to 2026-07-11

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.mediraty.pl/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload