orszak.org

HTML metadata

Title: Orszak Trzech Króli
Description: Orszak Trzech Króli to przedstawienie Jasełek wystawiane w przestrzeni publicznej, na ulicach wiosek, miast i miasteczek w Polsce oraz zagranicą.
Language: pl
Canonical: https://orszak.org/

Open Graph

title: Orszak Trzech Króli
description: Orszak Trzech Króli to przedstawienie Jasełek wystawiane w przestrzeni publicznej, na ulicach wiosek, miast i miasteczek w Polsce oraz zagranicą.

Technology

Server: nginx
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.googletagmanager.com×1
www.vaticannews.va×1

Social

Contact

Email

Phone

DNS records live

NS

ns1.panel.orszak.org
ns2.panel.orszak.org

MX

10 orszak-org.mail.protection.outlook.com

TXT

MS=DD3A03627406B345F3ABD9336C60063A7B78A678

Verified for

Microsoft 365

Email authentication partial

SPF

v=spf1 a mx ip4:5.135.137.36 include:spf.protection.outlook.com include:spf.cal.pl include:_spf.elasticemail.com include:_spf.emaillabs.net.pl ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:biuro@orszak.org; sp=none;

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P0L2fD8yq76XgaRriZq7FpuBgdIroqpXZdLq+odsRYzyv99Ah8cd+LOBza0TssEmZJCGGdKbSNj/3…

selectors probed

Certificate (current)

R13

from 2026-04-14 to 2026-07-13

Expires in 38 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://orszak.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; default-src 'self' data: blob: *.openstreetmap.org opteam.pl web360.opteam.pl mail.web360.opteam.pl google.com www.google.com www.googleadservices.com www.google.pl player.vimeo.com googletagmanager.com google-analytics.com googleads.g.doubleclick.net doubleclick.net www.vaticannews.va; img-src data: blob: * *.momentjs.net *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.googlesyndication.com *.gstatic.com *.hotjar.com *.twitter.com *.youtube.com ajax.googleapis.com opteam.pl web360.opteam.pl mail.web360.opteam.pl google.com www.google.com www.googleadservices.com www.google.pl player.vimeo.com googletagmanager.com google-analytics.com googleads.g.doubleclick.net doubleclick.net www.vaticannews.va; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com opteam.pl web360.opteam.pl mail.web360.opteam.pl google.com www.google.com www.googleadservices.com www.google.pl player.vimeo.com googletagmanager.com google-analytics.com googleads.
strict-transport-security: max-age=31536000; includeSubDomains; preload, max-age=63072000; includeSubDomains; preload