metro.waw.pl

.pl crawl

First seen 2026-05-20 · Last seen 2026-05-30 · ok HTTP/1.1 200 1287 ms crawled 2026-05-27

PL · 5.252.231.200 · AS203417 LH.pl Sp. z o.o.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title

Metro Warszawskie

Language

pl-PL

Generator

WordPress 6.9.4

Canonical

https://metro.waw.pl/

Feeds

Technology

Server: nginx
CMS: WordPress 6.9.4
PHP: 7.4.33 end of life
jQuery: 3.7.1

Fonts

Google Fonts

Third-party hosts loaded (1)

fonts.googleapis.com×1

Social

Contact

Phone

2025-12-11 12

DNS records live

NS

dns.home.pl
dns2.home.pl
dns3.home.pl

MX

0 metro-waw-pl.mail.protection.outlook.com

TXT

Show 4 TXT records

mojecertpl-site-verification-L0PtY1eIvX2FNb8uGXBX69d9kNv1jQYO
57dc94dd6e98a2587a0ab41571a3760ee161213ede8a7547e59bb73879e4525
713799209d8c8df14861abc03ae4629aded4378f320bba70bd5e9b0064572c6
a9fb3d7d55f5f498c24aaba5bb81bc7e5d042b6e73728ad174fec11e7a500c4

Email authentication strong

SPF

v=spf1 ip4:78.88.190.174 ip4:81.210.6.62 ip4:195.205.148.130 ip4:195.205.148.129 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@metro.waw.pl; ruf=mailto:dmarc@metro.waw.pl

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0X7EMmkZm4GRNePmOdAVlB8TilxWpXrTXu79QaXj5iAlA5UYYqAam0BDY3mx3iWJo8x9FCrXrOW6J…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+K0ufn5EPctCPiRxXm+tFiCVCU9mYWD1CbJRdgZHCVymuqQl4AmF2LI38dMmbf89wHxIEFaPXk8qo…

selectors probed

Certificate (current)

Certum Organization Validation CA SHA2

from 2025-05-29 to 2026-05-29

Expired 2 days ago

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://metro.waw.pl/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")