warbud.pl

HTML metadata

Title: WARBUD - generalny wykonawca
Description: Generalny wykonawca inwestycji budowlanych, jedna z największych firm budowlanych w Polsce.

Technology

Server: LiteSpeed
jQuery: 3.6

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (2)

consent.cookiebot.com×1
fonts.googleapis.com×1

Social

DNS records live

NS

ns1.cyberfolks.pl
ns2.cyberfolks.pl

MX

10 vincic.mail.protection.outlook.com

TXT

cc2fa80ff28ed41119096f3a38d9209bc36128f0c2b8829dc358d98dc02bb64
mojecertpl-site-verification-eOctZ3TOTRZWlLlXTwou9rs2S5r6gQLd
bw=N2lq86xDIlLaLFzaJwZrDhDMI5n7uAy2sdmxsRK7llX1

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 mx a include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1;rua=mailto:dmarc-alerte@vinci-construction.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDno9z20vJPvF7WwNlpofyLxG5tqRmYW61uDcQoRhr8i1JI2yX/Cb5zI8jDOWBgemWPD4cEhhgJBC+sPX+yyC…

selectors probed

Certificate (current)

Certum Domain Validation CA SHA2

from 2025-09-01 to 2026-09-01

Expires in 93 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://warbud.pl/pl

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), xr-spatial-tracking=(self), clipboard-read=(self), clipboard-write=(self), gamepad=(self), hid=(self), idle-detection=(self), serial=(self), window-placement=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'nonce-c6679cb9832121c5960a908be6f56443' https://imgsct.cookiebot.com https://consent.cookiebot.com/uc.js https://consentcdn.cookiebot.com https://consent.cookiebot.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://skk.erecruiter.pl https://www.google-analytics.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; script-src 'self' 'nonce-c6679cb9832121c5960a908be6f56443' https://consentcdn.cookiebot.com https://skk.erecruiter.pl https://consent.cookiebot.com https://googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://ssl.google-analytics.com/ga.js https://consent.cookiebot.com/uc.js; img-src 'self' data: https://*.google-analytics.com https://skk.erecruiter.pl https://*.googletagmanager.com https://ssl.google-analytics.com http://imgsct.cookiebot.com https://googletagmanager.com
strict-transport-security: max-age=31536000; includeSubDomains