indexo.dev

mza.waw.pl

.pl crawl

First seen 2026-05-20 · Last seen 2026-05-31 · ok HTTP/1.1 200 3194 ms crawled 2026-05-27

PL · 20.215.12.2 · AS8075 Microsoft Corporation

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Strona główna - Miejskie Zakłady Autobusowe w Warszawie
Language
pl-PL
Generator
Site Kit by Google 1.178.0
Canonical
https://www.mza.waw.pl/

Open Graph

url
https://www.mza.waw.pl/
title
Strona główna - Miejskie Zakłady Autobusowe w Warszawie
locale
pl_PL
site name
Miejskie Zakłady Autobusowe w Warszawie

Technology

Server
nginx
CMS
WordPress
jQuery
3.7.1
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (6)

  • cdn.jsdelivr.net×4
  • www.googletagmanager.com×3
  • fonts.googleapis.com×2
  • wcag.dock.codes×2
  • fonts.gstatic.com×1
  • gmpg.org×1

Social

DNS records live

NS
  • dns1.mza.waw.pl
  • dns2.mza.waw.pl
  • dns3.mza.waw.pl
MX
  • 10 mza-waw-pl.mail.protection.outlook.com
TXT
  • MS=60612407E7692BAF4D0112E36169E1952CEEFDA0
Verified for
  • Cisco
  • Google
  • Microsoft 365

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com mx a:poczta.mza.waw.pl a:ni-srv-as.mza.waw.pl ip4:185.236.97.105 -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:m365.alert@mza.waw.pl;ruf=mailto:m365.alert@mza.waw.pl
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49JrlpxLIqtMm+Febcz9V752BkqQvKdvsAcVJXsVM65q5WNfAZhqFlQIZQBjNePabxXg58Mnrppsoe…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BIqfYsTgqEoB2/oEGm5iEn0bYj8ridBe9AoyaTFuWk2AGxGmP1s1XRZAMRGyaDgMI05idQaNkmE/o…
selectors probed

Certificate (current)

home pl DV TLS G2 R35 CA
from 2026-01-30 to 2027-02-22
Expires in 266 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.mza.waw.pl/

present
  • strict-transport-security
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • missing Content Security Policy
Header values
referrer-policy
strict-origin
x-frame-options
SAMEORIGIN
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
x-content-type-options
nosniff
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (8)

Linked from (2)