patientsoftomorrow.de

.de crawl

First seen 2026-06-02 · Last seen 2026-06-02 · ok HTTP/1.1 200 393 ms crawled 2026-06-02

NL · 51.144.186.103 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Language: pl-PL

Technology

Server: Commodore64

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Social widgets

Vimeo Embed

Third-party hosts loaded (4)

www.googletagmanager.com×2
consent.cookiefirst.com×1
player.vimeo.com×1
use.typekit.net×1

Contact

Email

Phone

Registration

Updated

2026-04-01

Name servers

ns1-08.azure-dns.com.
ns2-08.azure-dns.net.
ns3-08.azure-dns.org.
ns4-08.azure-dns.info.

DNS records live

NS

ns1-08.azure-dns.com
ns2-08.azure-dns.net
ns3-08.azure-dns.org
ns4-08.azure-dns.info

TXT

mojecertpl-site-verification-ltfczlEnajdorlhAD3KmcBUj4fP97D44

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1;p=reject; pct=100; rua=mailto:dmarc-niepocztowe@neuca.pl;ruf=mailto:dmarc-niepocztowe@neuca.pl;fo=1;adkim=s;aspf=s;sp=reject
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-10-08 to 2026-10-15

Expires in 134 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://patientsoftomorrow.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: sync-xhr=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com 'nonce-3a9a08618653b6ee38d29478fba27aad' https://consent.cookiefirst.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://consent.cookiefirst.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https://www.google-analytics.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://region1.google-analytics.com https://region1.analytics.google.com https://api.cookiefirst.com https://stats.g.doubleclick.net; img-src 'self' https://www.google.pl; frame-src https://player.vimeo.com;, upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin;
cross-origin-embedder-policy: unsafe-none;
cross-origin-resource-policy: same-origin;