dana.at

HTML metadata

Technology

Server

Microsoft-IIS

Analytics

• Google Tag Manager

Cookie consent

• Cookiebot

Fonts

• Google Fonts

Third-party hosts loaded (6)

• cdnjs.cloudflare.com×2
• code.jquery.com×2
• assets.pinterest.com×1
• consent.cookiebot.com×1
• fonts.googleapis.com×1
• www.googletagmanager.com×1

Social

• facebook
• instagram
• youtube
• linkedin

DNS records live

NS

• dns1.cscdns.net
• dns2.cscdns.net

MX

• 10 dana-at.mail.protection.outlook.com

TXT

• _axyxxffvxe47p2auzwft0qjxe9wmd3b

Email authentication strong

SPF

v=spf1 include:spf.mlwrx.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_agg@jeldwen.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc_for@jeldwen.com;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUVhm+fc9Ryjps7z95gzaepyNt3C2y1uoCumDmP46azd7Yg0GlEO60ifRCwgUgUBHHw4kYU2C8PExT…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDMQmCcRufhtzci5EUz0P9+c3hBmAX3C1Ws03NffdWtkIQBOkAgfTBZJbpynnDGBbTWfsBBVUY1uAY…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt51iAGu7tP6q6boCSNkWyTTAR12btqM6M+yBVsS1Yh73JqoadbDJc9Bj+WhYKKs3FPXvSxrowTW59PzdsQ…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlP7d9YcVOooiyHJIwXBrB42rEVpYe5ZqYsePSpa+59lHFVwVlLkJ1Kc6DR3kJ5eAKAbFJmGwlWzmwvUeuZVOcjj…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.dana.at

present

• content-security-policy

findings

• missing HSTS
• CSP uses wildcard sources
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (5)

• facebook.com×1
• instagram.com×1
• linkedin.com×1
• pinterest.de×1
• youtube.com×1

Linked from (2)

• deriazsa.ch×1
• lehrlingspower.at×1