eprzspottingteam.pl

HTML metadata

Technology

Server

LiteSpeed

jQuery

1.8.2 known XSS (<3.5)

Stack

CodeIgniter

Fonts

• Google Fonts

Third-party hosts loaded (3)

• ajax.googleapis.com×1
• cookiealert.sruu.pl×1
• fonts.googleapis.com×1

DNS records live

NS

• ns1.cyberfolks.pl
• ns2.cyberfolks.pl
• ns3.cyberfolks.pl

MX

• 10 mail.eprzspottingteam.pl

Email authentication partial

SPF

v=spf1 a mx include:_spf.cyberfolks.pl -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none;

policy: none (monitoring only) · sp=none

DKIM

no key found at common selectors

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked over plain HTTP: http://eprzspottingteam.pl/

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (2)

• wizzziy.pl×1
• davidos.pl×1

Linked from (1)

• davidos.pl×1