stadapoland.pl
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- 11.cdn.stada.com×7
- fonts.googleapis.com×2
- www.googletagmanager.com×2
- fonts.gstatic.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns3.rejestracjadomen.pl
- ns4.rejestracjadomen.pl
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 70 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
connect-src 'self' *.usercentrics.eu usercentrics.eu *.google-analytics.com google-analytics.com *.googlesyndication.com googlesyndication.com *.kairion.de kairion.de *.googleapis.com googleapis.com *.google.com google.com *.gstatic.com gstatic.com *.googleadservices.com googleadservices.com *.fls.doubleclick.net *.g.doubleclick.net *.doubleclick.net doubleclick.net *.clarity.ms clarity.ms *.tiktok.com tiktok.com *.amazon-adsystem.com amazon-adsystem.com *.tiktokw.us tiktokw.us *.paa-reporting-advertising.amazon paa-reporting-advertising.amazon *.google.co.uk google.co.uk *.facebook.com facebook.com *.conversionsapigateway.com conversionsapigateway.com mpc-prod-14-s6uit34pua-ue.a.run.app *.hotjar.com hotjar.com *.maven360.io maven360.io *.adsrvr.org adsrvr.org *.bing.com bing.com *.pinterest.com pinterest.com *.juicer.io juicer.io *.cdn.stada.com cdn.stada.com; font-src 'self' *.gstatic.com gstatic.com *.typekit.net typekit.net *.cdn.stada.com cdn.stada.com; frame-ancestors 'self'; fra- strict-transport-security
max-age=31536000; preload
Links to (3)
- youtube.com×1
- stada.com×1
- linkedin.com×1