lekcjeciepla.pl
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Contact
- Phone
DNS records live
- NS
-
- dns.home.pl
- dns2.home.pl
- dns3.home.pl
- MX
-
- 10 lekcjeciepla.pl
Email authentication weak
- SPF
-
v=spf1 mx a ptr ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- dkim:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGxXV7p/aETdIjdIztvRC+MzB/LFSI5oCXnpwbVLlaPUwZlkrYhGAy7fs7sS+Hyxsw7hUlfsAngEnp…
selectors probed - dkim:
Certificate (current)
home pl DV TLS G2 R35 CA
Expires in 298 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer, strict-origin-when-cross-origin- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src data: blob: 'self' fonts.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com www.google.com www.youtube.com www.googletagmanager.com *.doubleclick.net player.vimeo.com vimeo.com; block-all-mixed-content; connect-src 'self' www.facebook.com *.lekcjeciepla.pl lekcjeciepla.pl *.google-analytics.com stats.g.doubleclick.net https://consentcdn.cookiebot.com; frame-src https://consentcdn.cookiebot.com; img-src 'self' data: blob: via.placeholder.com track.mailerlite.com ssl.gstatic.com *.google-analytics.com *.google.com *.google.pl *.googletagmanager.com stats.g.doubleclick.net igcp platformaigcp.devmm.pl lekcjeciepla.pl *.lekcjeciepla.pl *.facebook.com; media-src 'self' blob: data: vimeo.com; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com *.google-analytics.com tagmanager.google.com www.googletagmanager.com www.google.com www.gstatic.com consent.cookiebot.com *.facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagma- strict-transport-security
max-age=15768000; includeSubDomains