gree.jp

HTML metadata

Technology

Server

Apache

CMS

Gatsby

jQuery

1.11.1 known XSS (<3.5)

Third-party hosts loaded (3)

• aimg-static-ssl.gree.net×15
• aimg-static.gree.net×2
• games.gree.net×1

DNS records live

NS

• ns1-56.akam.net
• ns4-64.akam.net
• ns5-64.akam.net
• ns7-64.akam.net

MX

• 10 bs6002.mail.gree.jp
• 10 bs6003.mail.gree.jp
• 10 bs6004.mail.gree.jp

Email authentication partial

SPF

v=spf1 include:spf03.gree.jp include:spf-bma.mpme.jp include:mail.zendesk.com -all

strict (-all)

DMARC

v=DMARC1;p=none;rua=mailto:dmarc-report@gree.net;ruf=mailto:dmarc-report@gree.net;rf=afrf;pct=100

policy: none (monitoring only)

DKIM

• default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+UHSBHhL632M48EH8qGIYJiFHPVqRZAVe7XhJft5TJcBle/CgNOMXXQDhkhWR1QZiUfIlv2OSYwXUFng24x…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://gree.jp/

present

• x-frame-options

findings

• missing HSTS
• missing Content Security Policy
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (1)

• gree.net×2