arboe.at

HTML metadata

Technology

jQuery

3.2.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (4)

• cdn.priv.center×2
• fast.fonts.net×1
• maps.googleapis.com×1
• www.googletagmanager.com×1

Social

• facebook
• twitter
• youtube
• instagram

Contact

Phone

• 050123123

DNS records live

NS

• dns1.a1.net
• dns2.a1.net
• dns3.a1.net

MX

• 10 mx1-eu1.ppe-hosted.com
• 10 mx2-eu1.ppe-hosted.com

TXT

• offensity-domain-verification=6eb17024e7790496fd0eebe03542ea68b15826942cf5eb931d3ce99270f113f4
• ppe-a0501075095a3774998e2e63120d8ce010e137a7
• _ajhip4zpce1911kx4187b31yhj8p6jc

Verified for

• Google
• Meta
• Microsoft 365

Email authentication partial

SPF

v=spf1 mx ip4:80.120.70.53 ip4:193.228.86.27 ip4:80.121.147.149 a:fmlgw01.3-s.at a:fmlgw02.3-s.at a:fmlgw03.3-s.at include:spf.mlwrx.com include:_spf-eu.ppe-hosted.com ?all

neutral (?all)

DMARC

v=DMARC1; p=none; adkim=s; aspf=r

policy: none (monitoring only)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.arboe.at

present

• strict-transport-security
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing frame protection
• weak content type protection
• missing Permissions Policy

Links to (8)

• cca-camping.at×1
• eaclubs.org×1
• facebook.com×1
• freiefahrt.at×1
• instagram.com×1
• twitter.com×1
• verkehrsradio.at×1
• youtube.com×1

Linked from (2)

• pfister-racing.eu×1
• eaclubs.org×1