smsapi.pl

HTML metadata

Title

SMSAPI – zaufany partner w globalnej komunikacji SMS

Description

Masowa wysyłka wiadomości SMS dla firm. Intuicyjny panel, aplikacja mobilna, proste API i gotowe integracje. Dołącz do +10000 zadowolonych klientów!

Language

pl

Canonical

https://www.smsapi.pl

Translations

pl

Open Graph

url: https://www.smsapi.pl
title: SMSAPI – zaufany partner w globalnej komunikacji SMS
site name: SMSAPI
description: Masowa wysyłka wiadomości SMS dla firm. Intuicyjny panel, aplikacja mobilna, proste API i gotowe integracje. Dołącz do +10000 zadowolonych klientów!

Technology

CMS: Next.js
JS framework: Next.js

Third-party hosts loaded (2)

cdn.smsapi.com×129
sentry.smsapi.com×1

Social

Contact

Address: Toszecka 101, 44-117, Gliwice PL, Gliwice PL, PL

DNS records live

NS

ns-1263.awsdns-29.org
ns-1644.awsdns-13.co.uk
ns-195.awsdns-24.com
ns-773.awsdns-32.net

MX

10 mail.smsapi.pl

TXT

eeae2bba574f3318bef65116895a023879491ea7b7d10547461adfd59b09a9dd
mojecertpl-site-verification-XglWTxBcbSVOCs6hwSa9vIPjEI0xwntb
sahvah4ztk

Verified for

Meta

Email authentication strong

SPF: v=spf1 mx -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:admin@smsapi.pl; ruf=mailto:admin@smsapi.pl; fo=1;
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

Certum Domain Validation CA SHA2

from 2025-06-04 to 2026-06-04

Expires in 3 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.smsapi.pl/

present

strict-transport-security
content-security-policy
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(),camera=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),payment=(),usb=()
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.clickcease.com *.cookiebot.eu *.cookiebot.com *.cookielaw.org *.doubleclick.net *.erecruiter.pl *.fontawesome.com *.google-analytics.com *.linkedin.com *.google.com *.google.pl *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com/recaptcha/ *.hotjar.com *.hotjar.io *.intercom.io *.licdn.com *.onetrust.com *.tawk.to cdn.smsapi.com cdn.jsdelivr.net cdnjs.cloudflare.com connect.facebook.net js.intercomcdn.com plausible.io sgtm.smsapi.pl bat.bing.com *.clarity.ms *.devsms.com ; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.clickcease.com *.cookiebot.eu *.cookiebot.com *.cookielaw.org *.doubleclick.net *.erecruiter.pl *.fontawesome.com *.google-analytics.com *.linkedin.com *.google.com *.google.pl *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com/recaptcha/ *.hotjar.com *.hotjar.io *.intercom.io *.licdn.com *.onetrust.com
strict-transport-security: max-age=31536000; includeSubDomains