biecz.pl

HTML metadata

Technology

Server

LiteSpeed

jQuery

3.4.1 known XSS (<3.5)

Fonts

• Google Fonts

Third-party hosts loaded (5)

• fonts.googleapis.com×4
• fonts.gstatic.com×2
• airly.eu×1
• translate.google.com×1
• widget.ekomalopolska.pl×1

Social

• youtube
• facebook
• instagram

Contact

Email

• um@biecz.pl

Phone

• 13 447 11 13

DNS records live

NS

• ns1.i.media.pl
• ns2.i.media.pl
• ns3.i.media.pl

MX

• 0 biecz.pl

TXT

• mojecertpl-site-verification-URlOovlLvQtmcTX3n8UVXmKi7mulBhrA

Email authentication strong

SPF

v=spf1 +a +mx +ip4:185.49.148.35 +ip4:185.49.148.35 +ip4:185.49.148.194 +ip4:185.49.148.0/24 -all

strict (-all)

DMARC

v=DMARC1;p=reject;sp=reject;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:mm@biecz.pl

policy: reject (enforced) · sp=reject

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TYLaUGECRdHry4MOAIIjuslCNIeS07KqzgmKT8BB3BXwiKkh6l1N/sMSe3H+QrTWmmiQ8+3QqUhA3…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.biecz.pl/asp/start,0

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing Permissions Policy

Links to (23)

• youtube.com×1
• www.gov.pl×1
• w3.org×1
• visitmalopolska.pl×1
• umcs.pl×1
• prologit.pl×1
• powietrze.malopolska.pl×1
• powiatgorlicki.pl×1
• plsk.eu×1
• monitorpolski.gov.pl×1
• malopolskie.pl×1
• kromerfestivalbiecz.pl×1
• krakow.pl×1
• instagram.com×1
• idmn.pl×1
• i.media.pl×1
• gunb.gov.pl×1
• gison.pl×1
• fundusz-patriotyczny.pl×1
• facebook.com×1
• epuap.gov.pl×1
• dziennikustaw.gov.pl×1
• bip.malopolska.pl×1

Linked from (1)

• wisloka.pl×1