czystajelesnia.pl

HTML metadata

Technology

Server

Apache

jQuery

3.2.1 known XSS (<3.5)

Stack

PHP

Fonts

• Google Fonts

Third-party hosts loaded (5)

• cdnjs.cloudflare.com×5
• www.zgk-jelesnia.pl×3
• fonts.googleapis.com×2
• maps.googleapis.com×1
• poradnia.tenit.pl×1

DNS records live

NS

• ns1.tenit.com.pl
• ns2.tenit.com.pl

MX

• 10 mail.czystajelesnia.pl

Email authentication weak

SPF

v=spf1 a mx ip4:37.27.96.151 ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked over plain HTTP: http://www.czystajelesnia.pl/

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• zgk-jelesnia.pl×1
• www.gov.pl×1
• nfosigw.gov.pl×1
• google.com×1
• dziennikustaw.gov.pl×1
• apple.com×1

Linked from (2)

• zgk-jelesnia.pl×1
• jelesnia.pl×1