dansac.de

HTML metadata

Technology

CDN

Azure Front Door

jQuery

1.11.1 known XSS (<3.5)

Stack

ASP.NET

Social

• facebook
• instagram
• linkedin

Contact

Phone

• 08008883388

Registration

Updated

2012-12-18

Name servers

• dns1.idp365.net.
• dns2.idp365.net.
• dns3.idp365.net.

DNS records live

NS

• dns1.idp365.net
• dns2.idp365.net
• dns3.idp365.net

MX

• 0 dansac-de.mail.protection.outlook.com

TXT

Show 7 TXT records

• 6KlCVugRJtobTdTgjaS7y/KkL7JNCcKNE53P6ixre4cTkt1tYcjji56MIJlLY5t7PPC3qsb+BZ8KJFtc/rxdaA==
• 8uu1t4g0bje8fk6sf48mh45iug
• qypvdudu7va7ru67oakwq6irz7rx3y
• 71pci5jq4umk7r5sfcehd9s4tv
• ugja2mbg29frmq6c7cb3h8aats
• o2s0iklqjvg0ti3i92a1v4jv1e
• H0O4L07499

Verified for

• Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.messagelabs.com ip4:131.107.21.231 include:spf.protection.outlook.com -all

strict (-all) · multiple SPF records

DMARC

v=DMARC1; p=reject; ruf=mailto:postmaster@hollister.com; fo=1; pct=100

policy: reject (enforced)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C9l8aXAS/qccmMp8Zx5zGUkr0N1jE6XGIji7HngC2bryfEsRhUUiLCoPBWGKJiC8fgk0hVmIa1jb8…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.dansac.de/de-de/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (16)

• linkedin.com×1
• instagram.com×1
• hollister.com×1
• facebook.com×1
• dansac.se×1
• dansac.no×1
• dansac.nl×1
• dansac.it×1
• dansac.ie×1
• dansac.fi×1
• dansac.dk×1
• dansac.co.uk×1
• dansac.ch×1
• dansac.be×1
• dansac.at×1
• dansac-akademie.de×1

Linked from (11)

• dansac.ie×1
• dansac.it×1
• dansac.co.uk×1
• dansac.nl×1
• dansac.dk×1
• dansac.be×1
• dansac.fi×1
• dansac.at×1
• dansac.ch×1
• dansac.se×1
• dansac.no×1