powiat-makowski.pl

HTML metadata

Technology

Server

LiteSpeed

jQuery

3.4.1 known XSS (<3.5)

Ads

• Meta Pixel

Fonts

• Google Fonts

Social widgets

• YouTube Embed

Third-party hosts loaded (4)

• fonts.googleapis.com×4
• connect.facebook.net×1
• fonts.gstatic.com×1
• youtube.com×1

Social

• facebook
• youtube

Contact

Email

• starostwo@powiat-makowski.pl

DNS records live

NS

• ns1.i.media.pl
• ns2.i.media.pl
• ns3.i.media.pl

MX

• 1 smtp2.powiat-makowski.pl

TXT

• 5498b2bd65a5a075cec48bd20f9ca4d6
• 527ee4680d2ae070b7d25bb0fa0313a280d44dd2a494b1516c4a9abe209015be

Email authentication strong

SPF

v=spf1 +a +mx +ip4:45.9.139.12 ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;adkim=r;aspf=r;pct=100;fo=1;rf=afrf;ri=86400;rua=mailto:admin@powiat-makowski.pl;ruf=mailto:admin@powiat-makowski.pl

policy: quarantine · sp=quarantine

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiNAaLMocmY9hO0fYT2yWZ2V54Ebd5Rd7D8SkAxzoJ95ay3Za/2ePahCa/rDAdycjEkOaHgzQFKqVq…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.powiat-makowski.pl/asp/pl_licznik.asp

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing Permissions Policy

Links to (24)

• zpp.pl×1
• youtube.com×1
• www.gov.pl×1
• wrotamazowsza.pl×1
• wkraj.pl×1
• w3.org×1
• samorzad.gov.pl×1
• salamandra.org.pl×1
• prologit.pl×1
• pozyczkimazowieckie.pl×1
• portalsamorzadowy.pl×1
• ngo.pl×1
• monitorpolski.gov.pl×1
• mcps.com.pl×1
• kochammakow.pl×1
• i.media.pl×1
• gunb.gov.pl×1
• geoportal2.pl×1
• funduszeeuropejskie.gov.pl×1
• facebook.com×1
• epuap.gov.pl×1
• dziennikustaw.gov.pl×1
• bgk.pl×1
• art.pl×1

Linked from (1)

• karniewo.pl×1