naszsekret.com.pl
HTML metadata
Technology
- Server
- LiteSpeed
- CMS
- Joomla
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- cdn.popupsmart.com×2
- www.googletagmanager.com×1
DNS records live
- NS
-
- ns1.cyberfolks.pl
- ns2.cyberfolks.pl
- ns3.cyberfolks.pl
- MX
-
- 10 mail.naszsekret.com.pl
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 a mx include:_spf.cyberfolks.pl -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=nonepolicy: none (monitoring only) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 51 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- permissions-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
Header values
- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self "https://naszsekret.com.pl/")- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' naszsekret.com.pl *.naszsekret.com.pl *.www.naszsekret.com.pl data: blob: http://fonts.googleapis.com http://fonts.gstatic.com http://www.google.com https://www.gstatic.com http://graph.facebook.com *.facebook.com https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://d.tile.openstreetmap.org *.openstreetmap.org https://www.google-analytics.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com *.googlesyndication.com *.doubleclick.net *.google.pl *.google.com *.googletagservices.com *.cloudflare.com *.youtube.com *.ytimg.com *.userway.org api.userway.org cdn.jsdelivr.net *.googletagmanager.com *.google-analytics.com *.stripe.com *.basemaps.cartocdn.com *.facebook.net- strict-transport-security
max-age=2592000