maslow.pl

HTML metadata

Technology

Server

LiteSpeed

jQuery

3.4.1 known XSS (<3.5)

Ads

• Meta Pixel

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Third-party hosts loaded (4)

• fonts.googleapis.com×4
• fonts.gstatic.com×2
• connect.facebook.net×1
• youtube.com×1

Social

• facebook
• youtube

DNS records live

NS

• ns1.dinfo.com.pl
• ns2.dinfo.com.pl
• ns3.dinfo.com.pl

MX

• 10 mx-1.dpoczta.pl
• 10 mx-2.dpoczta.pl

Email authentication partial

SPF

v=spf1 include:_mail.dhosting.pl ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none; rua=mailto:dmarc-raports@dhosting.pl

policy: none (monitoring only) · sp=none

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.maslow.pl/asp/start,0

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing Permissions Policy

Links to (35)

• zs-machocice.pl×1
• youtube.com×1
• wokollysejgory.pl×1
• wetgiw.gov.pl×1
• w3.org×1
• szkolnastrona.pl×1
• szkolamaslow.pl×1
• superszkolna.pl×1
• spmachocice.pl×1
• pttk.pl×1
• przedsiebiorcymaslow.pl×1
• prologit.pl×1
• mos.gov.pl×1
• monitorpolski.gov.pl×1
• manifo.com×1
• lcoi.pl×1
• kielce.uw.gov.pl×1
• kielce.pl×1
• i.media.pl×1
• gops-maslow.pl×1
• gison.pl×1
• geoportal.gov.pl×1
• funduszeeuropejskie.gov.pl×1
• forecast7.com×1
• facebook.com×1
• esesja.pl×1
• epuap.gov.pl×1
• ehost.pl×1
• edupage.org×1
• e-mapa.net×1
• dziennikustaw.gov.pl×1
• ceidg.gov.pl×1
• biuletyn.net×1
• beskidinstruments.com×1
• arr.gov.pl×1

Linked from (2)

• punktyadresowe.pl×1
• pttkkielce.pl×1