sitpnig.pl

HTML metadata

Technology

Server

Apache

jQuery

1.10.2 known XSS (<3.5)

Stack

PHP

Fonts

• Google Fonts

Third-party hosts loaded (1)

• fonts.googleapis.com×2

Social

• facebook

DNS records live

NS

• ns12.wixdns.net
• ns13.wixdns.net

MX

• 10 mail.sitpnig.pl

Email authentication strong

SPF

v=spf1 mx a ip4:77.55.138.252/32 a:sitpnigadmin.nazwa.pl ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@sitpnig.pl;

policy: quarantine

DKIM

no key found at common selectors

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked over plain HTTP: http://sitpnig.pl/

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (21)

• orlen.pl×2
• inig.pl×2
• facebook.com×2
• eurotech.com.pl×2
• wixsite.com×1
• pgnig.pl×1
• osir-krakow.pl×1
• orlenupstream.pl×1
• orlenpoludnie.pl×1
• orlen-oil.pl×1
• not.org.pl×1
• lotos.pl×1
• eurotech-int.pl×1
• darkred.pl×1
• abb.com×1
• gaz-system.pl×1
• agh.edu.pl×1
• linkedin.com×1
• nazwa.pl×1
• noxmeet.com×1
• wix.com×1

Linked from (5)

• enot.pl×2
• greengaspoland.pl×2
• not.org.pl×2
• szkolawczarnej.pl×1
• not-tarnow.pl×1