indexo.dev

fundacjadom.org

.org crawl

First seen 2026-06-03 · Last seen 2026-06-03 · ok HTTP/1.1 200 516 ms crawled 2026-06-04

PL · 185.208.164.145 · AS41079 Cyber_Folks S.A.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
STRONA GŁÓWNA - Fundacja DOM Dbamy O Młodych
Language
pl-PL
Generator
Divi Child v.1.0.0
Canonical
https://fundacjadom.org/
Feeds

Open Graph

url
https://fundacjadom.org/
title
STRONA GŁÓWNA - Fundacja DOM Dbamy O Młodych
locale
pl_PL
site name
Fundacja DOM Dbamy O Młodych

Technology

Server
LiteSpeed
CMS
WordPress
jQuery
3.7.1
Ads
  • Meta Pixel
Fonts
  • Google Fonts
Social widgets
  • YouTube Embed

Third-party hosts loaded (5)

  • fonts.googleapis.com×2
  • js.stripe.com×2
  • connect.facebook.net×1
  • www.google.com×1
  • www.youtube.com×1

Social

Contact

Email
Phone

Registration

Registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
Created
2015-01-05
Expires
2027-01-05 214 days left
Updated
2025-12-20
Name servers
  • ns1.cyberfolks.pl
  • ns2.cyberfolks.pl
  • ns3.cyberfolks.pl

DNS records live

NS
  • ns1.cyberfolks.pl
  • ns2.cyberfolks.pl
  • ns3.cyberfolks.pl
MX
  • 10 mail.fundacjadom.org

Email authentication partial

SPF
v=spf1 include:_spf.mlsend.com a mx include:_spf.cyberfolks.pl -all
strict (-all)
DMARC
v=DMARC1; p=none; sp=none
policy: none (monitoring only) · sp=none
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-04-13 to 2026-07-12
Expires in 37 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://fundacjadom.org/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google.pl https://www.google.com https://cdn.trustindex.io https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://youtube.com/ https://*.youtube.com/ https://youtube-nocookie.com/ https://*.youtube-nocookie.com/ https://youtu.be/ https://js.stripe.com/ https://connect.facebook.net/pl_PL/sdk.js https://www.facebook.com/ https://app.freshmail.com//pl/actions/ajaxsubscribe/ https://forms.freshmail.io/ https://www.e-pity.pl/ https://opp.e-pity.pl/ https://www.paypalobjects.com/ https://s3.amazonaws.com/ https://*.stripe.com/ https://*.siepomaga.pl https://*.docs.google.com https://google-analytics.com/ https://*.google-analytics.com/ https://googletagmanager.com/ https://*.googletagmanager.com/ https://*.hs-analytics.net/ https://*.hsappstatic.net/ https://*.hs-scripts.com/ https://*.hs-banner.com/ https://*.hsadspixel.net/ https://*.hscollectedforms.net/ https://*.hsleadflows.net/

Links to (4)