bfi-ooe.at

HTML metadata

Technology

Server

nginx

jQuery

1.11.2 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Adobe Fonts

Third-party hosts loaded (4)

• webcache-eu.datareporter.eu×2
• p.typekit.net×1
• use.typekit.net×1
• www.googletagmanager.com×1

Social

• facebook
• youtube
• instagram
• linkedin

Contact

Email

• service@bfi-ooe.at
• service@bfi-ooe.atnewsblognews

Phone

• 073269226922

Address

Muldenstraße 5, 4020, Linz, Oberösterreich, AT

DNS records live

NS

• ns1.easyname.eu
• ns2.easyname.eu

MX

• 0 bfiooe-at0i.mail.protection.outlook.com

TXT

Show 4 TXT records

• A4386B1E63F6501604A5911DE42EAE900C40FE76C69E57C08827B072ED7DB05B
• have-i-been-pwned-verification=03b9847c8ac24e7fc7c2956f16931bae
• lN1MnP6yJdv/grFOtqK6m3eERL2sjgfvIh17j+y8LcPvP7KRnKPEBRoMHkW699XAL78w127h/aM7j4TQKyZ83Q==
• offensity-domain-verification=fff485a8401a3719d0439879acb4a580ba3f769a1f6c02eb6622f7905efc66ae

Verified for

• Apple
• Cisco
• Google
• Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mlwrx.com ip4:62.99.231.229 ip4:81.19.145.0/24 ip4:78.46.8.243 ip4:85.31.21.6 a:mail.jobnetzwerk.de a:er-mail.erecruiter.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@bfi-ooe.at,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc@bfi-ooe.at; aspf=r

policy: quarantine

DKIM

Show 4 DKIM selectors

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A1AMIimKNznwspH16r0JyRJGyuXKZ5BgWpaWAZRHohZRAzC2saAlp/c1do8dcA6YNHo9rcckRepyV…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWFNd87afIGx6ET06FeVU1swhqO/NbPpNxzalniCuwCAkYKTmav5KZgfLj4VqxqHy6KGCtXzMmI40e…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqw1oZTw3T0u23QJwqO4og6b4aN8Zz8s0eGH5oKYSNgQ/O2o0a7kWPW9Pcz3KRFeTFUPcW99cO29JGvT13…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubwrxlZNrc8MAFxFwh50QNwY0y1QHtizMM2Fn7V2D8uiAHQYgsPLb/MCO12QEHY2iQWMxJDIIGR6sQpTbg…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.bfi-ooe.at/de/index.html

present

• strict-transport-security
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• missing frame protection
• missing Permissions Policy

Links to (13)

• youtube.com×1
• weiterbilden.at×1
• sozialministeriumservice.gv.at×1
• oe-cert.at×1
• linkedin.com×1
• leitbetriebe.at×1
• land-oberoesterreich.gv.at×1
• instagram.com×1
• facebook.com×1
• europa.eu×1
• edubfi.at×1
• arbeiterkammer.at×1
• ams.at×1

Linked from (1)

• wels.gv.at×1