count.plDomain analysis & security report

• SPFMissing

  No SPF record: any server can send mail that claims to come from this domain.

  —
• DKIMNot found

  No key at the 12 common selectors we checked. A custom selector can’t be found from DNS alone.

  —
• DMARCMissing

  No DMARC policy: receivers aren’t told what to do with mail that fails SPF and DKIM.

  —
• MTA-STSMissing

  Forces encrypted delivery between mail servers.

  —
• BIMINot found

  Shows the brand logo in supporting inboxes. Optional; needs DMARC enforcement.

  —

Read from the domain's public DNS records.

• Strict-Transport-SecurityMissing

  Forces HTTPS on future visits.

• Content-Security-PolicyMissing

  Limits where scripts can load from — the main defence against XSS.

• X-Frame-OptionsPass

  Stops the site being framed for clickjacking.

• X-Content-Type-OptionsPass

  Prevents browsers guessing file types.

• IPv6No IPv6 address
  No
• DNSSECDNS answers aren’t signed
  No
• CAA recordAny CA may issue certificates
  No
• TLS 1.3Latest encryption protocol
  Yes
• HTTP/3QUIC-based, lower latency
  Yes
• HSTS preloadNot on the browsers’ preload list
  No

1. http://count.pl/302
2. https://count.pl/200

• HTTP redirects to HTTPSVisitors who type the address end up on a secure page.
  Pass
• www and non-www agreewww.count.pl ends on https://www.count.pl/, a different address.
  Warning
• 1 hop — no loopsA short path to the page.
  Pass