wodgik.katowice.pl

HTML metadata

Technology

Server

Apache

jQuery

2.2.3 known XSS (<3.5)

Analytics

• Google Tag Manager

Cookie consent

• Cookiebot

Social widgets

• YouTube Embed

Third-party hosts loaded (5)

• www.youtube.com×2
• consent.cookiebot.com×1
• cssmapsplugin.com×1
• maxcdn.bootstrapcdn.com×1
• www.googletagmanager.com×1

Social

• facebook
• youtube
• linkedin

Contact

Email

• pzgik@wodgik.katowice.pl
• orsip@wodgik.katowice.pl
• bplaczek@wodgik.katowice.pl
• ase@wodgik.katowice.pl
• sekretariat@wodgik.katowice.pl

Phone

• 322091965
• 326019808

DNS records live

NS

• kappa.hotweb.pl
• sigma.hotweb.pl

MX

• 10 mgate.wodgik.katowice.pl

Email authentication strong

SPF

v=spf1 a mx ip4:213.25.173.130 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc.report@wodgik.katowice.pl; ruf=mailto:dmarc.forensic@wodgik.katowice.pl; pct=100; fo=1

policy: quarantine

DKIM

• mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTjK/2roDQcD687wp2cHqNuAiW6cV8TQZzKRHbxOlZjk149Jo2PuW4Lj1smr+3ge/hrx…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.wodgik.katowice.pl/

present

• strict-transport-security
• x-frame-options
• x-content-type-options

findings

• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (11)

• youtube.com×2
• slaskie.pl×2
• sejm.gov.pl×2
• orsip.pl×2
• nereus-regions.eu×2
• lubelskie.pl×2
• linkedin.com×2
• facebook.com×2
• epuap.gov.pl×2
• eo4geo.eu×2
• arcgis.com×2

Linked from (1)

• orsip.pl×2