provider.pl
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress 6.8.3
- PHP
- 8.3.26 security-only
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (7)
- cdn.jsdelivr.net×4
- cdnjs.cloudflare.com×4
- fonts.googleapis.com×3
- ajax.googleapis.com×2
- gmpg.org×1
- www.google.com×1
- www.googletagmanager.com×1
Contact
- Phone
DNS records live
- NS
-
- ns1.provider.pl
- ns136.provider.pl
- ns4.provider.pl
- MX
-
- 10 mail19.provider.pl
- 30 mail18.provider.pl
- TXT
-
Show 9 TXT records
1941905d24b85e218dee478ae026670cd319f4265522f7c0b27311b4887ca77MS=519D427B6C7539D8100147D967D5048FEAA4617A6c898d3384dcc6224a84fcf3f3a359882c513fca483e40b375357bd9fd249d58463fd79dec0502c74c3922f044f2de30356dbd914b2e2dca24a477a519878fc40d5fb9ad01bbb2c6eeb8840080aaee928c08c5b94bfe623ff9f8b692783bbe75f52f2f93f908340e9b109f19e75d6df61cfa0045fb3d782bceb181f09ab356b8fd551e3718d97e45eb98e91ccfe650bd74c93e6ba7c256aefdb41c4f6981ca27e6a73937805e5cb641a864adacb183bf0b79a21af10a4f495fe28f8d1b402352b0e70b3f59f2c76dd99b29032c7c509d29a0acc87fa3dfb919ab733fae6e
- Verified for
-
Email authentication weak
- SPF
-
v=spf1 mx ip4:194.187.144.0/22 ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Certum DV TLS G2 R39 CA
Expires in 127 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.google.com *.hotjar.com *.jsdelivr.net *.cloudflare.com *.gstatic.com *.yoast.com yoast.com *.vimeo.com youtube.com *.youtube.com *.twitter.com *.youtube-nocookie.com provider.pl *.provider.pl; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.google.com *.hotjar.com *.jsdelivr.net *.cloudflare.com *.gstatic.com *.twitter.com *.youtube.com youtube.com *.vimeo.com cdn.syndication.twimg.com *.twimg.com provider.pl *.provider.pl www.googletagservices.com *.googlesyndication.com *.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com maps.google.com maps.gstatic.com maps.googleapis.com translate.googleapis.com translate.google.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.cloudflare.com *.twitter.com *.twimg.com provider.pl *.provider.pl fonts.googleapis.com maps.googleapis.com translate.googleapis.co- strict-transport-security
max-age=31536000; includeSubDomains