duell.se

HTML metadata

Technology

Server

Microsoft-IIS

PHP

5.5.3 end of life

jQuery

1.11.3 known XSS (<3.5)

Stack

PHP

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (3)

• ajax.googleapis.com×2
• fonts.googleapis.com×1
• www.googletagmanager.com×1

Contact

Phone

• 556917-7099
• 924 298 102
• 334269694

DNS records live

NS

• dns1.triuvare-webhosting.fi
• dns2.triuvare-webhosting.fi
• dns3.triuvare-webhosting.fi
• dns4.triuvare-webhosting.fi
• ns1-global.pointhq.com

MX

• 0 duell-fi.mail.protection.outlook.com

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 mx include:spf.protection.outlook.com include:spf.epressi.com ip4:81.209.125.205 ip4:62.148.195.108 ip4:192.89.123.25 ip4:81.209.125.217 ip4:192.130.140.194 a:duexch.duell.fi ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; aspf=r

policy: reject (enforced)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+HTnmirH39oH/soqd0k0LUBY6wVPYdTxXQZGa0aNKgnhsbVGsWGtSergHEG29I8xwCezkK5hzY37A+BwYMa…
• selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoW/6mPg8bu3fHSJF9pNL8WSmsny5QA46kmN4M8LcT8LV0Kk7N4yVqGtCAbVeFMfOKNBfExQeuKOqxZGqOWk…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.duell.se/sv/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (3)

• issuu.com×1
• duell.eu×1
• amoqsports.com×1

Linked from (1)

• duell.eu×1