pans.nysa.pl

HTML metadata

Technology

Server

nginx

Analytics

• Google Tag Manager

Third-party hosts loaded (2)

• www.googletagmanager.com×2
• cdn-cookieyes.com×1

Social

• facebook
• instagram
• twitter
• youtube
• linkedin
• tiktok

DNS records live

NS

• fosa.pans.nysa.pl
• stud.student.pans.nysa.pl

MX

• 0 pans-nysa-pl.mail.protection.outlook.com

TXT

• mojecertpl-site-verification-NneIn91139iKP6nhmfBw4spdvOyShPFG

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:rua@pans.nysa.pl; ruf=mailto:ruf@pans.nysa.pl

policy: reject (enforced)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqsOj76/Do3lhyNQHobItPTjli/wv+Aoaea54llzimV5eruPZuMiwLIFdw61N5DNgOrIElEaXPqIlS…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://pans.nysa.pl/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (12)

• youtube.com×1
• www.gov.pl×1
• userway.org×1
• twitter.com×1
• tiktok.com×1
• softwaresystem.pl×1
• pwsz.nysa.pl×1
• powiat.nysa.pl×1
• nysa.eu×1
• linkedin.com×1
• instagram.com×1
• facebook.com×1

Linked from (1)

• nysa.eu×1