floraxchange.nl

HTML metadata

Technology

CMS

Ghost 1.20.53.0

jQuery

1.9.1 known XSS (<3.5)

Stack

ASP.NET

Analytics

• Google Tag Manager

Third-party hosts loaded (3)

• maxcdn.bootstrapcdn.com×2
• ajax.googleapis.com×1
• www.googletagmanager.com×1

DNS records live

NS

• nsauth1.interconnect-dns.nl
• nsauth2.interconnect-dns.eu
• nsauth3.interconnect-dns.be

MX

• 1 aspmx.l.google.com
• 10 aspmx2.googlemail.com
• 10 aspmx3.googlemail.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

Verified for

• Google

Email authentication weak

SPF

v=spf1 a:s01.jem-id.nl include:_spf.google.com include:servers.mcsv.net ip4:83.98.229.21 ip4:46.44.132.29 ip4:188.126.117.128 ip4:185.89.80.199 ~all

softfail (~all)

DMARC

not published

DKIM

• google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCPr9NBFijGC7BSrhUHvmUxPGrBh9P9LZtMEkgDOq9jA5mTgwlpMWertwxhltehCSrFw5WOKdFtyNzC7qkUDm…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://floraxchange.nl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (1)

• floriday.io×1

Linked from (4)

• pietsmits.nl×1
• bamboekwekerijhoeksewaard.nl×1
• kneppersrozen.nl×1
• senseofseasons.com×1