asol.at

HTML metadata

Technology

Server

nginx

CMS

WordPress

jQuery

1.9.1 known XSS (<3.5)

Third-party hosts loaded (1)

• ajax.googleapis.com×2

Contact

Email

• office@asol.at
• wienoffice@asol.at

Phone

• 123456789

DNS records live

NS

• gabe.ns.cloudflare.com
• may.ns.cloudflare.com

MX

• 5 asol-at.mail.protection.outlook.com

TXT

• _6a4kjd8qopszxvygpbm9bvc3i1su2xn
• _w0sn88k6foq7dg6hytth1gn1hp0m8ga
• 32545ae40c0c10b06649a9c351c0bff3562908a704f4449dc69fbebc96701b9

Verified for

• Google
• Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.sendingservice.net ip4:116.202.83.249 ip4:88.198.21.13 ip4:168.119.145.149 ip4:116.202.84.217 ip4:144.76.96.53 ip4:148.251.233.75 ip4:176.9.155.254 ip4:62.178.249.145 ip4:148.251.127.79 ip4:46.4.199.53 ip4:148.251.181.184 ip4:167.235.99.150 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:stefan.fuchs@asol.at,mailto:guenter.kavsek@asol.at; aspf=r

policy: quarantine

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDmDKIgPmCsDPUDraVR82ZRIDLHTS9FjnkRfQ1lI7JqUZSUTv9+pwZOZ0CBQhDD2xlF0JfjijwrUtLtQk9ER…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.asol.at/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (6)

• jungbrunnen.co.at×1
• passagen.at×1
• sonderzahl.at×1
• somedia-buchverlag.ch×1
• picus.at×1
• kremayr-scheriau.at×1