pzrugby.pl

HTML metadata

Technology

Server

Apache

PHP

5.6.40 end of life

jQuery

2.0.3 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (6)

• fonts.googleapis.com×6
• ajax.googleapis.com×2
• img.youtube.com×1
• maps.googleapis.com×1
• translate.google.com×1
• www.googletagmanager.com×1

Social

• facebook
• youtube
• twitter
• instagram
• linkedin

DNS records live

NS

• dns3.foldruk.media.pl
• dns4.foldruk.media.pl

MX

• 10 mail.pzrugby.pl
• 30 mail2.pzrugby.pl

Verified for

• Google

Email authentication weak

SPF

v=spf1 a mx ip4:109.125.199.37 ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://pzrugby.pl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (25)

• youtube.com×1
• www.gov.pl×1
• worldrugby.org×1
• twitter.com×1
• tvp.pl×1
• systempzr.pl×1
• soskitaid.com×1
• rugbyeurope.eu×1
• polbroker.pl×1
• pentagon-research.com×1
• orlen.pl×1
• olimpijski.pl×1
• netlify.app×1
• nagiry-polska.pl×1
• linkedin.com×1
• lasy.gov.pl×1
• kupbilet.pl×1
• kspzr.pl×1
• instagram.com×1
• foldruk.media.pl×1
• facebook.com×1
• evrugbya.com×1
• cos.pl×1
• cered.pl×1
• antydoping.pl×1

Linked from (1)

• rugbyeurope.eu×1