giby.pl

HTML metadata

Technology

Server

Apache

CMS

WordPress

PHP

7.2.34 end of life

jQuery

3.4.1 known XSS (<3.5)

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Third-party hosts loaded (5)

• cdn-cookieyes.com×1
• fonts.googleapis.com×1
• s.w.org×1
• www.iwop.pl×1
• www.youtube.com×1

Contact

Phone

• (87) 516 50 38
• (87) 516 50 37
• (87) 516 50 27
• (87) 516 50 25

DNS records live

NS

• ns1.o12.pl
• ns2.o12.pl

MX

• 0 giby.pl

TXT

• mojecertpl-site-verification-c2lSdrXHHiiIpVJBozIwqO7hlnr8i0gS

Email authentication strong

SPF

v=spf1 +a +mx +ip4:77.55.252.23 +ip4:77.55.252.59 +ip4:77.55.252.79 ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;sp=reject;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=600;rua=mailto:informatyk@giby.pl

policy: reject (enforced) · sp=reject

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Scr4qTLp4fSV7TeKhY3IpFbN+SDdkhXsKbEbBiWtyx8FbXWcfGDLBVmrcMtwc1x8Rcjrw0mxENwE…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://giby.pl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (5)

• wrotapodlasia.pl×1
• podlaskie.eu×1
• pitax.pl×1
• niemen.org.pl×1
• europa.eu×1

Linked from (2)

• zgwwp.org.pl×1
• su-se.pl×1