sercadlamaluszka.pl

HTML metadata

Title

Fundacja Serca dla Maluszka

Description

Razem mamy #SuperMoc, aby tworzyć lepsze jutro. Dołącz do grona naszych SuperBohaterów i odmień czyjś los.

Language

pl-PL

Generator

WordPress 6.9.4

Canonical

https://sercadlamaluszka.pl/

Feeds

Fundacja Serca dla Maluszka » Strona główna Kanał z komentarzami RSS

Technology

CMS: WordPress 6.9.4
PHP: 8.5.6
Stack: PHP

Analytics

Google Tag Manager

Ads

Meta Pixel

Fonts

Adobe Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (4)

use.typekit.net×2
www.googletagmanager.com×2
www.youtube.com×2
connect.facebook.net×1

Social

Contact

Email

biuro@sercadlamaluszka.pl

Phone

DNS records live

NS

ernest.ns.cloudflare.com
lovisa.ns.cloudflare.com

MX

10 mail.sercadlamaluszka.pl

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx include:_spf.atthost.pl include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=reject; rua=mailto:b2f646f74cf34b76825c6ceb763d37cb@dmarc-reports.cloudflare.net;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TGDfuPZ0gpOljuEpaOuP1ZDnOsImOIIbwZSg3JH5OIM+RM9WNVkGTGXaSat0txFDAVQtMKHF/JTlg…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCAzXtVAVnPPpHJ3mSwXyBIopUtWW2Y5KByAHa4nDaSZ3ronyKh1PRcd8R29hCRE6W7OviJXpV6jGm…

selectors probed

Certificate (current)

R12

from 2026-04-28 to 2026-07-27

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://sercadlamaluszka.pl/

present

strict-transport-security
content-security-policy
x-frame-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://use.typekit.net https://p.typekit.net https://cdn.trustindex.io https://www.siepomaga.pl https://sercadlamaluszka.pl https://secure.gravatar.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; img-src 'self' data: https://i.ytimg.com https://connect.facebook.net https://cdn.trustindex.io https://video-waw2-1.xx.fbcdn.net https://video-waw2-2.xx.fbcdn.net https://sercadlamaluszka.pl https://secure.gravatar.com; font-src 'self' https://use.typekit.net https://p.typekit.net data:; connect-src 'self' https://multiclinic-api.tmdi00.com https://www.googletagmanager.com https://connect.facebook.net https://www.siepomaga.pl https://sercadlamaluszka.pl https://secure.gravatar.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://cdn.trustindex.io https://www.siepomaga.p
strict-transport-security: max-age=31536000; includeSubDomains