pkoleasing.pl

HTML metadata

Title: PKO Leasing
Description: Lider finansowania pojazdów i maszyn
Language: pl
Canonical: https://www.pkoleasing.pl

Technology

CMS: Next.js
JS framework: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

DNS records live

NS

ns1-02.azure-dns.com
ns2-02.azure-dns.net
ns3-02.azure-dns.org
ns4-02.azure-dns.info

MX

0 pkoleasing-pl.mail.protection.outlook.com

TXT

msfpkey=4rea0e5qqals0rf4h3qjv0brz
MS=CFA7030C7EDDDFA69D7F71A10BC0E46743E7BBE9
4e0d5123fa0538a53e92cdfc89972085ace2a0aa5b703899b209a810a8881b7

Email authentication strong

SPF

v=spf1 mx a ip4:159.183.78.186/32 ip4:77.79.234.16/28 ip4:185.170.107.32/32 ip4:185.170.107.36/32 ip4:185.30.124.51/32 ip4:195.177.216.135/32 ip4:193.109.225.0/24 ip4:194.242.62.0/24 ip4:159.183.225.24/32 ip4:159.183.225.249/32 ip4:159.183.225.6/32 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;sp=none;fo=1:d:s;pct=100;rua=mailto:pkol.rua@pkoleasing.pl;ruf=mailto:pkol.ruf@pkoleasing.pl;adkim=r;aspf=r;ri=43200

policy: quarantine · sp=none

DKIM

Show 4 DKIM selectors

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCUVm+foJ7b7QOJ/gPJwzo3Qmm0IVqt7LaeoTf3Z9NGpSbGWWoTmx7066X4FkOPRto+gxroV+3iSzU…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDImocwPQK1MTdwdlXIMvTIqwnGtAvijNjrPwJLrIAOIXI3HlRvxAiwK8qM1gxMyEuKvFtxlkDSjDgmd4N73X…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vlj3gNhNpgiXtBMPIrvRZ1CVxq01lblbKeS7K3LeeOe2GJ6yoadFFcRmUzMRubhQmrKOY3F+khzIn3pLR…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqci4fKa1xnION7+n/c75MuEunLC6SkKkNIiwW/kIaSpAYp3aex0QNfbpEg+8FTqmjbtO7QPcvIYCgC/0F…

selectors probed

Certificate (current)

Certum EV TLS G2 R39 CA

from 2025-11-19 to 2026-11-19

Expires in 172 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.pkoleasing.pl/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: same-origin
x-frame-options: ALLOW-FROM https://www.ipko.pl https://ipko.pkobp.pl
permissions-policy: microphone=(), geolocation=(self), camera=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.adform.net 360yield.com *.doubleclick.net cdn.tiny.cloud adservice.google.com adservice.google.pl ahrefs.com analytics.tiktok.com apis.google.com app.usercentrics.eu bat.bing.com connect.facebook.net doubleclick.net emplocity.com *.facebook.com *.facebook.net fintech.pkobp.pl fonts.googleapis.com fonts.gstatic.com iko.pkobp.pl kredobank.com.ua ls.hit.gemius.pl m.emplobot.com maps.google.com maps.googleapis.com maps.gstatic.com media.pkobp.pl sr-dev.travatar.ai pkosr.travatar.ai pagead2.googlesyndication.com platform.twitter.com pro.hit.gemius.pl pko.salesmanago.com https://programpartnerski.pkobp.pl googletagmanager.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com optimize.google.com www.google.com www.google.pl www.googleadservices.com www.googletagmanager.com www.gstatic.com www.mojafirma.pkobp.pl www.obligacjeskarbowe.pl www.pkobh.pl www.pkobp.pl www.pkofaktoring.pl www.pkofinance.se www.pkoleasing.pl