nysa.eu

.eu crawl

First seen 2026-05-23 · Last seen 2026-05-31 · ok HTTP/1.1 200 2080 ms crawled 2026-05-28

PL · 217.153.27.60 · AS12912 T-Mobile Polska S.A.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Strona główna - Portal Gminy Nysa
Language: pl
Generator: SmartSite by BIT Sp. z o.o. - https://www.bit-sa.pl [web2]

Open Graph

url: http://nysa.eu/
title: Strona główna - Portal Gminy Nysa
locale: pl_PL
site name: Portal Gminy Nysa

Technology

Stack: PHP

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×5
fonts.gstatic.com×1

Social

DNS records live

NS

ns1.domena.pl
ns2.domena.pl
ns3.domena.pl

MX

10 mx01.agnat.pl

TXT

5ef42b269a6ff84ea8a39946f52105ff358120e152700e8879b0b3b18489d3d
bb7d5c73-d7fd-449e-a3ed-ea946804c723
87986bfd5a129fff8e780fb2c46f50a9a2097ccc22154e5516311e49807a0a4

Verified for

Google

Email authentication strong

SPF: v=spf1 include:spf.agnat.pl -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:postmaster@um.nysa.pl; ruf=mailto:postmaster@um.nysa.pl; fo=0
policy: quarantine · sp=quarantine
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-05-29 to 2026-06-29

Expires in 28 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://nysa.eu/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src https: 'unsafe-inline' 'unsafe-eval' data: blob:

Links to (12)

Linked from (7)