zpe.gov.pl
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
DNS records live
- NS
-
- ns05.ngcs.pl
- ns06.ngcs.pl
- MX
-
- 10 smtp.zpe.gov.pl
- TXT
-
DirectFedAuthUrl=https://logowanie.zpe.gov.pl/saml/login7f5901a74061fdfa40286008132e5a0675c46aaedc6cd45d19546e158aaa8ca
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 ip4:194.54.27.142 ip4:194.54.27.154 ip4:95.178.121.84 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=reject; rua=mailto:test@zpe.gov.plpolicy: none (monitoring only) · sp=reject - DKIM
- no key found at common selectors
Certificate (current)
Certum OV TLS G2 R39 CA
Expires in 250 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl https://www.googletagmanager.com https://www.google-analytics.com;img-src 'self' 'unsafe-inline' data: blob: https://logowanie.zpe.gov.pl https://platforma.zpe.gov.pl https://static.zpe.gov.pl https://static.epodreczniki.pl https://www.google-analytics.com https://www.googletagmanager.com https://kronika.gov.pl;connect-src 'self' ws: blob: https://logowanie.zpe.gov.pl https://platforma.zpe.gov.pl https://moje.zpe.gov.pl https://static.zpe.gov.pl https://static.epodreczniki.pl https://sandbox.zpe.gov.pl https://sr-production.contentplus.io https://*.google-analytics.com;media-src 'self' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl;worker-src 'self' data: blob: https://static.zpe.gov.pl https://static.epodreczniki.pl;frame-src * data:;frame-ancest- strict-transport-security
max-age=31536000; includeSubDomains; preload