sportowyrzeszow.pl
HTML metadata
Technology
- Server
- nginx
- Stack
- PHP
Social
Contact
- Phone
DNS records live
- NS
-
- dns1.resman.pl
- dns2.resman.pl
- MX
-
- 10 mail.sportowyrzeszow.pl
- TXT
-
b04eab6f3135b152b9531b9b8eb9704f03062a87f68072ff9cd8ebe3b53baae49768026ecc65d5371561237674761dc5402436858d6f628c95b26c1ebff451650e47302d60a0426e9bb897b61e4e5b6c637da2f06b4f2efd26418b90dccae
- Verified for
-
Email authentication strong
- SPF
-
v=spf1 a mx ip4:84.38.160.169/32 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ri=86400;policy: reject (enforced) · sp=none - DKIM
-
- mail:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDRDuzBrb4miV/qbVl4xqYgh/C3OWrr+lNy2K1lZXrsIr1LYZmM/tRgoMRZhxlADSeC2Smp+hSw1QMJxJZYqx…
selectors probed - mail:
Certificate (current)
Certum DV TLS G2 R39 CA
Expires in 124 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer, strict-origin-when-cross-origin- x-frame-options
deny- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; default-src 'self' data: blob: *.openstreetmap.org poczta.resman.pl; img-src data: blob: * *.momentjs.net *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.googlesyndication.com *.gstatic.com *.hotjar.com *.twitter.com *.youtube.com ajax.googleapis.com poczta.resman.pl; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com poczta.resman.pl; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com *.easypack24.net *.tiktok.com *.ttwstatic.com *.inpost.pl poczta.resman.pl; frame-src 'self' *.google.com *.facebook.com *.youtube.com *.instagram.com *.twitter.com *.easypack24.net *.inpost.pl *.tiktok.com *.ttwstatic.com *.googletagmanager.com *.cloudflare.com *.openstreetmap.org poczta.resman.pl; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.momentjs.com momentjs.com *.google-analytics.com *.google.com connect.facebook.net *.instagram.com *.twitter.com *.googletagmanager.com *.hotjar.com *.gstatic.- strict-transport-security
max-age=31536000; includeSubDomains; preload, max-age=63072000; includeSubDomains; preload
Links to (8)
- youtube.com×1
- tiktok.com×1
- rosir.eu×1
- opteam.pl×1
- instagram.com×1
- google.pl×1
- facebook.com×1
- erzeszow.pl×1
Linked from (2)
- rosir.pl×1
- erzeszow.pl×1
sportowyrzeszow.pl