ncpp.opole.pl

.pl crawl

First seen 2026-05-28 · Last seen 2026-05-30 · ok HTTP/1.1 200 400 ms crawled 2026-05-30

PL · 185.178.156.210 · AS21182 Opole University

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Narodowe Centrum Polskiej Piosenki
Description: Narodowe Centrum Polskiej Piosenki
Language: pl
Canonical: https://ncpp.opole.pl/

Technology

Server: Apache
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
cdn.cookie-script.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

DNS records live

NS

ns1.kei.pl
ns2.kei.pl

MX

10 mx-1.ncpp.opole.pl
15 mx-1.ncpp.opole.pl

Verified for

Google

Email authentication strong

SPF: v=spf1 a mx include:spf.tld.pl include:_spf.google.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:admin@ncpp.opole.pl; ruf=mailto:admin@ncpp.opole.pl;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

cyber_Folks

from 2026-02-26 to 2027-02-26

Expires in 270 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://ncpp.opole.pl/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' https://*.cookie-script.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://www.gstatic.com https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://i.ytimg.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.cookie-script.com https://*.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net; frame-src https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com https://open.spotify.com https://player.vimeo.com;

Links to (12)

Linked from (1)

mystic.pl×1