sitkrp.org.pl

HTML metadata

Technology

Server

nginx

PHP

8.2.16 security-only

jQuery

3.3.1 known XSS (<3.5)

Stack

Laravel

Fonts

• Google Fonts

Third-party hosts loaded (5)

• fonts.googleapis.com×2
• cdnjs.cloudflare.com×1
• code.jquery.com×1
• fonts.gstatic.com×1
• www.openstreetmap.org×1

Social

• facebook
• linkedin

Contact

Email

• zarzad@sitkrp.org.pl
• 59zarzad@sitkrp.org.pl

Phone

• 537887299

DNS records live

NS

• ns1.not-informatyka.pl
• ns2.not-informatyka.pl

MX

• 10 parrot.enot.pl

Email authentication partial

SPF

v=spf1 mx -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; fo=1; rua=mailto:dmarc-reports@not-informatyka.pl

policy: none (monitoring only)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.sitkrp.org.pl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (26)

• voestalpine.com×2
• vdei.de×2
• ueeiv.eu×2
• tracktec.eu×2
• tinesrail.com×2
• sitkrp.com×2
• scheidt-bachmann.pl×2
• sabel.pl×2
• rail-mil.eu×2
• pgeenergetykakolejowa.pl×2
• openstreetmap.org×2
• not-informatyka.pl×2
• neel.com.pl×2
• linkedin.com×2
• kzn.pl×2
• kombud.com.pl×2
• hitachirail.com×2
• hadatap.pl×2
• graw.com×2
• google.com×2
• frt.org.pl×2
• freightliner.eu×2
• facrail.com×2
• facebook.com×2
• arkance-systems.pl×2
• alstom.com×2

Linked from (6)

• enot.pl×2
• not.org.pl×2
• sitk.org.pl×1
• ueeiv.eu×1
• warsawconvention.pl×1
• frt.org.pl×1