dfpkalender.at

HTML metadata

Technology

Server

nginx

jQuery

1.4.2 known XSS (<3.5)

Stack

Java

DNS records live

NS

• ns1.domaintechnik.at
• ns2.domaintechnik.at
• ns3.domaintechnik.at
• ns4.domaintechnik.at

MX

• 10 mx02.hornetsecurity.com
• 15 mx03.hornetsecurity.com
• 20 mx04.hornetsecurity.com
• 5 mx01.hornetsecurity.com

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com ip4:95.129.206.198 ip4:95.129.207.30 ip4:95.129.207.45 include:spf.hornetsecurity.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;sp=reject;pct=100;rua=mailto:dmarc@techbold.at;ruf=mailto:dmarc@techbold.at;ri=86400;aspf=r;fo=1

policy: quarantine · sp=reject

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.dfpkalender.at/public-dfpkalender/searchAdvanced.jsf

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (2)

• dfp.at×1
• arztakademie.at×1

Linked from (3)

• med.or.at×1
• neuraltherapie.at×1
• danubechipcto.eu×1