equipplast.be

HTML metadata

Technology

Server

nginx

jQuery

2.1.4 known XSS (<3.5)

Stack

PHP

Third-party hosts loaded (1)

• ajax.googleapis.com×1

Social

• linkedin

Contact

Email

• info@ajsolutions.be
• info@boybenelux.nl
• info@csplastics.be
• info@fanuc.be
• info@plastima.nl
• info@kraussmaffei.com
• sales@moretec.nl
• info@ora.be
• info@robotech.nl
• info@tkpm.eu

DNS records live

NS

• ns1.european-server.eu
• ns3.european-server.com
• ns4.european-server.com

MX

• 10 mx.mailprotect.be
• 50 mx.backup.mailprotect.be

Email authentication weak

SPF

v=spf1 mx a include:_spf.relay.mailprotect.be ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://equipplast.be/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (22)

• wittmann-group.com×1
• tkpm.eu×1
• staubli.com×1
• sepro-group.com×1
• robotech.nl×1
• plastima.nl×1
• plastikcs.be×1
• ora.be×1
• netstal.com×1
• moretec.nl×1
• linkedin.com×1
• kraussmaffei.com×1
• hasco.com×1
• fanuc.be×1
• engelglobal.com×1
• dmtechnics.com×1
• csplastics.be×1
• chenhsong.eu×1
• boybenelux.nl×1
• arburg.com×1
• ajsolutions.be×1
• acess.nl×1

Linked from (1)

• kunststoffenbeurs.nl×1