cyber.gov.pl
HTML metadata
Technology
- CDN
- Azure Front Door
DNS records live
- NS
-
- ns1-01.azure-dns.com
- ns2-01.azure-dns.net
- ns3-01.azure-dns.org
- ns4-01.azure-dns.info
Email authentication no MX
- SPF
-
v=spf1 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; adkim=s; aspf=spolicy: reject (enforced) · sp=reject - DKIM
- no key found at common selectors
Certificate (current)
GeoTrust TLS RSA CA G1
Expires in 101 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
geolocation=(), microphone=(), camera=(), payment=(), usb=()- content-security-policy
default-src 'self';base-uri 'self';form-action 'self';object-src 'none';frame-ancestors 'self';script-src 'self' 'unsafe-inline' stats.eadministracja.nask.pl www.googletagmanager.com connect.facebook.net *.googleadservices.com *.doubleclick.net *.cookiebot.com;style-src 'self' 'unsafe-inline';img-src 'self' data: https:;connect-src 'self' stats.eadministracja.nask.pl *.doubleclick.net *.googlesyndication.com *.google.com *.google.pl *.facebook.com *.cookiebot.com *.a.run.app *.conversionsapigateway.com *.googleadservices.com;frame-src *.doubleclick.net *.facebook.com *.cookiebot.com- strict-transport-security
max-age=31536000; includeSubDomains