indexo.dev

bof.org.pl

.pl crawl

First seen 2026-05-27 · Last seen 2026-05-27 · ok HTTP/1.1 200 545 ms crawled 2026-05-30

PL · 217.153.27.60 · AS12912 T-Mobile Polska S.A.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Strona główna - Stowarzyszenie BOF
Language
pl
Generator
SmartSite by BIT Sp. z o.o. - https://www.bit-sa.pl [web2]

Technology

Stack
PHP
Fonts
  • Google Fonts

Third-party hosts loaded (1)

  • fonts.googleapis.com×3

Social

Contact

Email

DNS records live

NS
  • ns1.nazwa.pl
  • ns2.nazwa.pl
  • ns3.nazwa.pl
MX
  • 0 bof-org-pl.mail.protection.outlook.com

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=none; sp=none
policy: none (monitoring only) · sp=none
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSSB3jz49KwN0ukFCwNTfdoVpsU7KJgKVKY493FzgHk/5xK6jt7I+xGBBmYKCMJIzovgKW8VsnD8i…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbv6GzoxCgk/aUkS8iSnVHx19DiKnur9FcvoXapAem5qvmJMNNRYpORtkZVw4s75Dq4MaoJO3UMFZa…
selectors probed

Certificate (current)

R13
from 2026-04-30 to 2026-07-29
Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://bof.org.pl/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src https: 'unsafe-inline' 'unsafe-eval' data: blob:

Links to (22)

Linked from (1)