kpmg.ie

HTML metadata

Technology

Server

Microsoft-IIS

DNS records live

NS

• ns1-04.azure-dns.com
• ns2-04.azure-dns.net
• ns3-04.azure-dns.org
• ns4-04.azure-dns.info

MX

• 2 mxa-00120b03.gslb.pphosted.com
• 2 mxb-00120b03.gslb.pphosted.com
• 4 mxa-00120b02.gslb.pphosted.com
• 4 mxb-00120b02.gslb.pphosted.com

TXT

Show 4 TXT records

• e09878b9d30d4367b11047600ef2baf1
• appspace-domain-verification=c598fdc868b4678ee4861a4c324d703d016e015fd0d21f01627178fefbda32d3
• paloaltonetworks-site-verification=1719225a3dcdf1a63268661fc867fc4bc8fe854369e77da4f3cad65fbcb53e91
• n272fg46vqtscwfsr1shpkkd7m6tpzln

Verified for

• Apple
• Atlassian
• GlobalSign
• Google

Email authentication strong

SPF

v=spf1 include:_spf.kpmg.com ip4:82.141.216.187 ip4:84.203.140.170 include:nw010.com include:nw008.com ip4:149.72.159.119 include:all.spf.avature.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pVcfVv3U4wT32IOwGwvsfijIecpuv6oo3wIG2NjdY7thUVAh+UGNDTlquGqE1IoOnRaERFAIhgTfYTVwb…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUldJ4CemkNjL+6OSWRR+BCuKvu2bhe8KZL4o0AZG2rXPuq7giMxKMkWuizMji6wJ4mdZesAx0AMI2cfgss2fC07…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://kpmg.ie/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• weak frame protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• irishsportindustryawards.ie×1