wakacyjnipiraci.pl

HTML metadata

Title: WakacyjniPiraci | Tanie wakacje, tanie loty
Description: Znajdź ✈️ tanie loty, błędy taryfowe, error fare ✈ Mamy też wakacje Last Minute, All Inclusive, tanie hotele, city break i SPA. Podróżowanie jest tanie!
Language: pl
Canonical: https://www.wakacyjnipiraci.pl/

Open Graph

url: https://www.wakacyjnipiraci.pl
title: WakacyjniPiraci | Tanie wakacje, tanie loty
locale: pl_PL
site name: WakacyjniPiraci
description: Znajdź ✈️ tanie loty, błędy taryfowe, error fare ✈ Mamy też wakacje Last Minute, All Inclusive, tanie hotele, city break i SPA. Podróżowanie jest tanie!

Technology

CDN: Cloudflare

Third-party hosts loaded (3)

media.holidaypirates.group×46
image.urlaubspiraten.de×33
images.ctfassets.net×5

Social

DNS records live

NS

bill.ns.cloudflare.com
elaine.ns.cloudflare.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx3.googlemail.com
39 aspmx2.googlemail.com

Verified for

Google
Meta

Email authentication strong

SPF

v=spf1 a mx ip4:136.243.114.86 ip4:148.251.15.8 ip4:144.76.44.26 ip4:144.76.106.108 include:_spf.google.com include:spf.mandrillapp.com include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarcreports@wakacyjnipiraci.pl; pct=100; aspf=r; adkim=r;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7AzkxEpnbCE2NKJuOa2NvVsRJDEI9B19z3MARM13WFnRP+nwnBpUS4AE7siyus4w99Ip8QiqIZrgp…

selectors probed

Certificate (current)

WE1

from 2026-04-22 to 2026-07-21

Expires in 51 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.wakacyjnipiraci.pl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;script-src * 'unsafe-eval' 'unsafe-inline';script-src-attr 'unsafe-inline';style-src * 'unsafe-inline';img-src * data:;font-src *;connect-src * ;manifest-src data:;frame-ancestors 'self';form-action *;base-uri 'self';object-src 'none'
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin