patientsoftomorrow.eu

.eu crawl

First seen 2026-06-02 · Last seen 2026-06-02 · ok HTTP/1.1 200 739 ms crawled 2026-06-02

NL · 51.144.186.103 · AS8075 Microsoft Corporation

Reputation 100/100

sector other type parked

HTML metadata

Language: pl-PL

Technology

Server: Commodore64

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Social widgets

Vimeo Embed

Third-party hosts loaded (4)

www.googletagmanager.com×2
consent.cookiefirst.com×1
player.vimeo.com×1
use.typekit.net×1

Contact

Email

Phone

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

TXT

2ba17a6a0e36796f06420e24f6337ecd183327b69bb367912c5c2e0439f55ee
mojecertpl-site-verification-ltfczlEnajdorlhAD3KmcBUj4fP97D44

Verified for

Google

Email authentication no MX

SPF: v=spf1 -all
strict (-all)
DMARC: v=DMARC1;p=reject; pct=100; rua=mailto:dmarc-niepocztowe@neuca.pl;ruf=mailto:dmarc-niepocztowe@neuca.pl;fo=1;adkim=s;aspf=s;sp=reject
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

cyber_Folks

from 2026-05-12 to 2026-11-27

Expires in 177 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://patientsoftomorrow.eu/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: sync-xhr=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com 'nonce-2fab765e30c25374083584f4a8213669' https://consent.cookiefirst.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://consent.cookiefirst.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https://www.google-analytics.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://region1.google-analytics.com https://region1.analytics.google.com https://api.cookiefirst.com https://stats.g.doubleclick.net; img-src 'self' https://www.google.pl; frame-src https://player.vimeo.com;, upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin;
cross-origin-embedder-policy: unsafe-none;
cross-origin-resource-policy: same-origin;