bip.org.pl

HTML metadata

Technology

Server

nginx

PHP

5.6.5 end of life

jQuery

1.12.1 known XSS (<3.5)

Third-party hosts loaded (2)

• cdnjs.cloudflare.com×2
• code.jquery.com×1

DNS records live

NS

• antek.plocman.pl
• indyk.plocman.pl

MX

• 0 poczta-plock.plocman.pl

Email authentication strong

SPF

v=spf1 ip4:217.28.146.0/26 ip4:195.117.35.0/25 ip4:54.38.142.25/32 ip4:195.117.178.11/32 -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=none; rua=mailto:dmarc-isp@bip.org.pl; ruf=mailto:dmarc-msg@bip.org.pl; rf=afrf; pct=100; ri=86400

policy: reject (enforced) · sp=none

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://bip.org.pl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (2)

• bip.gov.pl×1
• plocman.pl×1

Linked from (2)

• plocman.pl×1
• muzeumplock.eu×1