zstudio.pl

.pl crawl

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 827 ms crawled 2026-05-30

PL · 185.242.135.124 · AS50840 HITME.PL

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Projektowanie stron Warszawa | Zstudio
Description: Projektujemy strony internetowe szyte na miarę - bez szablonów, z autorskim CMS. Indywidualne podejście, nowoczesny design i wieloletnie doświadczenie.
Language: pl
Canonical: https://www.zstudio.pl/

Open Graph

url: https://www.zstudio.pl/
logo: https://www.zstudio.pl/img/logo.png
title: Projektowanie stron Warszawa | Zstudio
locale: pl_PL
site name: Zstudio
description: Projektujemy strony internetowe szyte na miarę - bez szablonów, z autorskim CMS. Indywidualne podejście, nowoczesny design i wieloletnie doświadczenie.

Technology

Server: Apache
CMS: Gatsby

Social

Contact

Phone

+48510103487

Address

Promyka 53b, 05-800, Pruszków

DNS records live

NS

dns3.hitme.net.pl
dns4.hitme.net.pl

MX

1 smtp.google.com

Verified for

Google

Email authentication partial

SPF

v=spf1 a mx ip4:185.242.135.124 ip6:0:0:0:0:0:0:0:1 include:_spf.google.com -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; rua=mailto:spam-reports@zstudio.pl

policy: none (monitoring only) · sp=none

DKIM

google: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHc3ZzQ6ST/FFpolPvgqg6FA/c2BhZkdX8oYeJimH4puYRPz3/uO3F/d8KLY5i2UTBgO6/1nlDd6RtMC…

selectors probed

Certificate (current)

R12

from 2026-05-26 to 2026-08-24

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.zstudio.pl/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' fonts.googleapis.com www.google.com; script-src 'self' unpkg.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self'; worker-src blob:; font-src 'self' fonts.gstatic.com 'unsafe-inline'; img-src 'self' data:; style-src 'self' fonts.googleapis.com 'unsafe-inline';