dosteba.ch

HTML metadata

Technology

CDN

Cloudflare

CMS

Ghost

ASP.NET

4.0.30319

jQuery

1.5.1 known XSS (<3.5)

Social

• facebook
• instagram
• youtube
• linkedin

DNS records live

NS

• ainsley.ns.cloudflare.com
• terin.ns.cloudflare.com

MX

• 10 asgate01.spamcontrol.beltronic.ch
• 20 asgate02.spamcontrol.beltronic.ch
• 30 asgate03.spamcontrol.beltronic.ch
• 40 asgate04.spamcontrol.beltronic.ch

TXT

• 87c2abdd-9183-4562-a3bd-6887aeb74afc

Verified for

• Microsoft

Email authentication strong

SPF

v=spf1 include:servers.mcsv.net include:antispameurope.com include:spf.mandrillapp.com include:spf-de.emailsignatures365.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;pct=100;rua=mailto:dmarc-check@beltronic.ch;ruf=mailto:dmarc-check@beltronic.ch;fo=1

policy: quarantine · sp=quarantine

DKIM

Show 4 DKIM selectors

• default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtetCZex8S9L1NBMpC8mphA+uW0FDBjxoSBfEqE4Ooewydgtpru1rEzcZXESJykGSDfhpJeS8aHqdEh4jzTdhz…
• k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgdbjSvVyVe8Kf2Uf/NKqZ450/lP65U+2qcP4HprHe8jic1nfzZkfp56OxqbBS0uqZxeXqz8ot6fK+VRnp…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/GbMydVZ4aDU6PCgJspoJA2ZeDoYpmT08m1UtNqbRbFlIltVOGY9KRj1fZJzvtXK6rf8TzrhcpRJbhcgRCu+n6e…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://dosteba.ch/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• youtube.com×1
• vimeo.com×1
• nopcommerce.com×1
• linkedin.com×1
• instagram.com×1
• facebook.com×1

Linked from (2)

• fvf-faserbeton.de×1
• smgv.ch×1