maratonbieszczadzki.pl

HTML metadata

Technology

Server

nginx

CMS

WordPress

jQuery

1.7.2 known XSS (<3.5)

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Third-party hosts loaded (6)

• www.youtube.com×8
• fonts.googleapis.com×2
• maps.googleapis.com×2
• netdna.bootstrapcdn.com×2
• gmpg.org×1
• www.facebook.com×1

DNS records live

NS

• ns1.kei.pl
• ns2.kei.pl

MX

• 10 poczta23131.e-kei.pl

Verified for

• Google

Email authentication weak

SPF

v=spf1 a mx include:spf.tld.pl -all

strict (-all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.maratonbieszczadzki.pl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (25)

• wbieszczady.pl×1
• ulefone.com.pl×1
• stronyzpomyslem.pl×1
• skalnyspa.pl×1
• polmaratongliwicki.pl×1
• mlekovita.com.pl×1
• mibrofit.pl×1
• mascalpejska.pl×1
• marma.com.pl×1
• lenko.com.pl×1
• lech.pl×1
• lasy.gov.pl×1
• krainawilka.pl×1
• hotel-carpatia.pl×1
• gorydlaciebie.pl×1
• gorskamasakra.pl×1
• fulllife.eu×1
• fit-land.eu×1
• excmobile.eu×1
• doz.pl×1
• biegrzeznika.pl×1
• biegpolesie.pl×1
• biegigorskie.pl×1
• biegambolubie.com.pl×1
• b4sportonline.pl×1

Linked from (3)

• polmaratongliwicki.pl×1
• biegrzeznika.pl×1
• biegigorskie.pl×1