mgslodz.pl

HTML metadata

Technology

Server

LiteSpeed

jQuery

1.7.2 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Third-party hosts loaded (4)

• vjs.zencdn.net×3
• maxcdn.bootstrapcdn.com×1
• www.google.com×1
• www.googletagmanager.com×1

Social

• facebook
• instagram
• youtube
• twitter

DNS records live

NS

• ns1.cyberfolks.pl
• ns2.cyberfolks.pl

MX

• 10 mail.mgslodz.pl

Email authentication strong

SPF

v=spf1 a mx include:_spf.cyberfolks.pl ip4:185.208.164.110/30 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:informatyka@mgslodz.pl

policy: quarantine · sp=quarantine

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://mgslodz.pl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (17)

• youtube.com×1
• www.gov.pl×1
• twitter.com×1
• patanetwork.org×1
• muzeumwlokiennictwa.pl×1
• muzeumtradycji.pl×1
• muzeum-lodz.pl×1
• medialab.pl×1
• lodz.pl×1
• kinomuzeum.pl×1
• kaus.it×1
• instagram.com×1
• iconichouses.org×1
• hotelscombined.pl×1
• facebook.com×1
• cracow.pl×1
• artinfo.pl×1

Linked from (1)

• fotofestiwal.com×1