nitroerg.pl

.pl crawl

First seen 2026-05-19 · Last seen 2026-06-04 · ok HTTP/1.1 200 3439 ms crawled 2026-05-24

PL · 62.87.254.225 · AS21010 KGHM Polska Miedz SA · dead nameservers

Reputation 70/100 dead nameservers

sector other type landing page

HTML metadata

Title

Strona główna - NITROERG

Language

pl-PL

Generator

WPML ver:4.9.4 stt:1,4,41,2;

Canonical

https://nitroerg.pl/

Translations

Open Graph

url: https://nitroerg.pl/
title: Strona główna - NITROERG
locale: pl_PL
site name: NITROERG

Technology

Server: Apache
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

cdnjs.cloudflare.com×2
fonts.googleapis.com×2
www.googletagmanager.com×2
gmpg.org×1
www.google.com×1

Social

Contact

Email

nitroerg@nitroerg.pl

Phone

DNS records dead

NS

dns.home.pl
dns2.home.pl
dns3.home.pl

MX

10 mx.nitroerg.pl

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificates

Loading certificate

HTTP security headers

Header hygiene 95/100 Checked live page: https://nitroerg.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.google.com https://www.gstatic.com; child-src 'self' https://www.google.com https://www.gstatic.com; media-src 'self' blob: https:; worker-src 'self' blob:;
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: same-origin