rsmpoland.pl
HTML metadata
Technology
- Server
- nginx
- CMS
- Drupal
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- cdnjs.cloudflare.com×1
- static.addtoany.com×1
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- dns.home.pl
- dns2.home.pl
- dns3.home.pl
- MX
-
- 0 rsmpoland-pl.mail.protection.outlook.com
- TXT
-
mojecertpl-site-verification-dGJxk8pB889On6WxV0HNaGgma2Gxf9mw
- Verified for
-
- Atlassian
- Meta
Email authentication strong
- SPF
-
v=spf1 ip4:83.238.62.66 ip4:83.238.62.74 include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1;p=reject;rua=mailto:postmaster@rsmpoland.plpolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhGYSOQqCMLdyCg+w/e7vI6CWzkcZZJQrkMh8b7RjP5IHk+/IaQIch5krEjuSxXOtV46hoHBsaiTBz… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr96nN7SYyGzBIOSot+GWD4Ae/aFarSWHIh/Z/KNxF2MTHnI50hw1Z+pofFvUzCKwEPhTEsetETRwb7WgX7… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAGdO2Aa0wgAZuBnNJZp0kxUsGECC9jgptETglWV9Rb2+/42mOZaRmkEl+MMPi2+Kij47AuxGJNuLvRSlKQHEHAb…
selectors probed - selector1:
Certificate (current)
R13
Expires in 63 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' www.youtube.com youtube.com; script-src 'self' 'unsafe-inline' *.addtoany.com *.cookiefirst.com *.cloudflare.com *.googletagmanager.com *.google.com *.gstatic.com *.jsdelivr.net trafficscanner.pl *.trafficscanner.pl *.cux.io *.doubleclick.net *.hotjar.com *.google-analytics.com *.licdn.com *.addthis.com *.leadberry.com *.facebook.net *.typeform.com *.vimeo.com *.linkedin.com *.instagram.com *.googleadservices.com *.googlesyndication.com *.google.pl *.bing.com *.clarity.ms; object-src 'self' *.google.com *.google.pl; style-src 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.google.com *.cookiefirst.com *.typeform.com *.googletagmanager.com *.google.pl *.jsdelivr.net; img-src 'self' data: region1.analytics.google.com *.doubleclick.net *.google.pl *.gstatic.com *.googletagmanager.com *.googleapis.com *.google.com *.linkedin.com *.cookiefirst.com *.facebook.com *.google-analytics.com *.google.pl; media-src 'self' *.youtube.com *.google.com *.google.pl; frame-- strict-transport-security
max-age=300