va.pl

Technology

Server

Apache

DNS records dead

NS

• ns1.os.pl
• ns2.os.pl

MX

• 10 poczta.os.pl

Email authentication strong

SPF

v=spf1 a mx include:spf.poczta.os.pl -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;adkim=r;aspf=r;pct=100;fo=1;rf=afrf;ri=86400;rua=mailto:spam-reports@os.pl;ruf=mailto:spam-reports@os.pl

policy: quarantine · sp=quarantine

DKIM

• default: ("v=DKIM1; k=rsa; t=y; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2NfccoomenBsNf8zyWzLS9hfHL3ZCtLp7yMB6xI+XlnS3Mw1cDOr1A13pJyIVPmktIDrWU…

selectors probed

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked over plain HTTP: http://va.pl/

present

• x-content-type-options

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing Referrer Policy
• missing Permissions Policy