kostka.dev

HTML metadata

Technology

Server

LiteSpeed

Third-party hosts loaded (2)

• unpkg.com×2
• www.gstatic.com×1

Social

• facebook

DNS records live

NS

• ns-cloud-e1.googledomains.com
• ns-cloud-e2.googledomains.com
• ns-cloud-e3.googledomains.com
• ns-cloud-e4.googledomains.com

MX

• 10 mail.protonmail.ch
• 20 mailsec.protonmail.ch

TXT

• protonmail-verification=cb210445f35ec347e70f4eed2a84c1ac2a688da7

Email authentication weak

SPF

v=spf1 include:_spf.protonmail.ch mx ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://kostka.dev/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (14)

• ioinformatics.org×2
• codeforces.com×2
• codilime.com×2
• codility.com×2
• withgoogle.com×2
• arxiv.org×2
• facebook.com×2
• google.com×2
• wroc.pl×1
• cvut.cz×1
• mimuw.edu.pl×1
• oi.edu.pl×1
• oij.edu.pl×1
• 1lo.lubin.pl×1

Linked from (1)

• addiscoder.com×2