kunstraum-innsbruck.at

HTML metadata

Technology

Server

Apache

jQuery

1.11.3 known XSS (<3.5)

Third-party hosts loaded (3)

• cdn.jsdelivr.net×1
• sibforms.com×1
• webfonts.typotheque.com×1

Social

• instagram
• facebook
• youtube

DNS records live

NS

• pns01.dcsix.net
• pns02.dcsix.net

MX

• 10 kunstrauminnsbruck-at02c.mail.protection.outlook.com

Verified for

• Brevo

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com mx include.spf.mail.webhome.at ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbaWtuuRuv/bA5nSXnaogmQEV4a3/pJi70YxmTy0LcbjsCRVqkr5UKz2iLU0CgUYZKrlHBjTnNb5Pl7cJT2m…
• mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.kunstraum-innsbruck.at/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (7)

• youtube.com×1
• tirol.gv.at×1
• instagram.com×1
• innsbruck.at×1
• innsbruck-tourismus.at×1
• facebook.com×1
• bmkoes.gv.at×1

Linked from (4)

• karinferrari.com×1
• anahoffner.com×1
• annahofbauer.com×1
• kunstvereine.de×1