poddebicki.pl

HTML metadata

Technology

Server

LiteSpeed

jQuery

3.4.1 known XSS (<3.5)

Ads

• Meta Pixel

Fonts

• Google Fonts

Third-party hosts loaded (3)

• fonts.googleapis.com×4
• connect.facebook.net×1
• fonts.gstatic.com×1

Social

• youtube
• facebook

DNS records live

NS

• ns1.i.media.pl
• ns2.i.media.pl
• ns3.i.media.pl

MX

• 0 poddebicki.pl

TXT

• ppe-a1cf9ea4179c8e251ad92f629638295f8cfc9812
• MS=D1EDF4C7E632C713F713E317554EC864E9B26556

Email authentication strong

SPF

v=spf1 ip4:185.49.148.195 ip4:185.49.148.70 ip4:10.0.0.15 +a +mx +ip4:185.49.148.0/24 ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;adkim=r;aspf=r;pct=100;fo=1;rf=afrf;ri=86400;ruf=mailto:informatyk@poddebicki.pl

policy: quarantine · sp=quarantine

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtA97s+tj+dqXM2VL3Ic9EGDZOhTsitD37ef3I8kdK1jjvyEGlmeayymgRnUV8hXz9o9TgPjG7OA76…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.poddebicki.pl/asp/start,0

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing Permissions Policy

Links to (22)

• youtube.com×1
• www.gov.pl×1
• w3.org×1
• tvp.pl×1
• transmisjaobrad.info×1
• prologit.pl×1
• praca.gov.pl×1
• pomagamylodzkie.pl×1
• platformazakupowa.pl×1
• neuvoo.pl×1
• lodzkie.pl×1
• lodz.pl×1
• jti.com×1
• i.media.pl×1
• gunb.gov.pl×1
• geoportal2.pl×1
• facebook.com×1
• epuap.gov.pl×1
• dokumentyzastrzezone.pl×1
• biuletyn.net×1
• bezkolejki.eu×1
• airly.org×1

Linked from (1)

• dalikow.eu×1