tim.pl

HTML metadata

Title: TIM.pl | Hurtownia elektryczna online | Sklep elektryczny online
Description: www.tim.pl - Internetowy Sklep Elektryczny TIM SA z osprzętem elektrycznym i elektrotechnicznym. Wysoka jakość produktów oraz usług. Blisko 60.000 produktów. Zamów online!
Language: pl
Canonical: https://www.tim.pl/

Open Graph

url: https://www.tim.pl/
title: TIM.pl | Hurtownia elektryczna online | Sklep elektryczny online
locale: pl_PL
site name: TIM SA
description: www.tim.pl - Internetowy Sklep Elektryczny TIM SA z osprzętem elektrycznym i elektrotechnicznym. Wysoka jakość produktów oraz usług. Blisko 60.000 produktów. Zamów online!

Technology

CDN: Cloudflare
CMS: Nuxt

Analytics

Cloudflare Insights
Google Analytics
Google Tag Manager

Ads

Google Ads
Google Ads (DoubleClick)

Cookie consent

Cookiebot

Third-party hosts loaded (10)

consent.cookiebot.com×2
cdn.jsdelivr.net×1
googleads.g.doubleclick.net×1
static.cloudflareinsights.com×1
stats.g.doubleclick.net×1
www.google-analytics.com×1
www.google.com×1
www.google.pl×1
www.googleadservices.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Address

Jaworska 13, 53-612, Wrocław, Poland, PL

DNS records live

NS

aryanna.ns.cloudflare.com
brian.ns.cloudflare.com

MX

0 smtp11.witglobal.net
0 smtp21.witglobal.net

TXT

Show 7 TXT records

linkedin-site-verification=36bd5448-a82f-4d8f-b577-a5b43dddca98
mojecertpl-site-verification-kCdXdB0CEqgaeF1gPJOMxwPev3C9HPC9
5120b90859096a4d7b1770de996cdee559f5270e5db9ad00f9aa9de27694276
74c57d2ceaa57445a700f6677b6267e0
803343e33e1cde43bcfa720b6a5a886471980f5cf772466478e2b94c6e14b1a
9d229d534337c0a822128269e98e063d59a35a90b6552b07f8fc306b2eb4467
ab75a19e29e0ac0590c1cb686731f8100aa4bf5ac2847e0afac699d436d5613

Verified for

Atlassian
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:limajo.witglobal.net include:_spf.jupiter.salesmanago.pl ip4:91.185.189.210 ip4:212.244.52.32 ip4:45.130.209.179 ip4:185.101.4.14 -all

strict (-all)

DMARC

v=DMARC1;p=none;pct=0;rua=mailto:dmarc@vercom.pl

policy: none (monitoring only) · pct=0

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwclMa+Vlw6x4SVHMlf8UJmAOTtWh4xPUuNqnoJpxLv5X6c7MGbSVmd8w6C2HVcwC/Q1x4EG2LiaVge…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDi4Nm0uAId+MkhSRC5Y3kd0WWWNdr5TDJGZZR5iipClf9TVTnRmB92yStuWH+twVPTcCE/YQVg34Kfwor48…
dkim: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqNc3yv53DJlllG2/jUamaShcvf7vwWMqW4YuE9MrR+NrFCBmgHANbMVOpraRWsI6zZePSMGUiIDql…

selectors probed

Certificate (current)

Certum Organization Validation CA SHA2

from 2025-08-19 to 2026-08-19

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.tim.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(self), battery=(), camera=(), gyroscope=(self), layout-animations=(self), legacy-image-formats=(self), magnetometer=(), microphone=(), midi=(self), navigation-override=(self), oversized-images=(self), picture-in-picture=(self), publickey-credentials-get=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: report-to endpoint; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.salesmanago.pl *.bing.com *.facebook.net *.cookiebot.com *.doubleclick.net *.google.com *.google.pl *.saleago.com *.google-analytics.com *.googletagmanager.com *.tim.pl *.googleadservices.com *.fact-finder.pl *.easypack24.net *.youtube.com *.pagespeed-mod.com *.googlesyndication.com *.hotjar.com connect.facebook.net www.googleadservices.com www.googletagmanager.com app2.salesmanago.pl cdn.jsdelivr.net www.tim.pl googleads.g.doubleclick.net www.google-analytics.com consent.cookiebot.com consentcdn.cookiebot.com geowidget.inpost.pl bat.bing.com timsa.fact-finder.pl app2.salesmanago.pl translate.googleapis.com region1.google-analytics.com region1.analytics.google.com ajax.googleapis.com www.google.com www.google.pl pagead2.googlesyndication.com www.pagespeed-mod.com survey.survicate.com surveys-static.survicate.com stats.g.doubleclick.net geowidget.easypack24.net embeddable-sandbox.cdn.apollographql.com timsa.fact-finde
strict-transport-security: max-age=2592000; includeSubDomains; preload