mandelbaum.at

HTML metadata

Technology

Server

nginx

jQuery

1.12.4 known XSS (<3.5)

Stack

PHP

Fonts

• Google Fonts

Third-party hosts loaded (2)

• ajax.googleapis.com×3
• fonts.googleapis.com×1

Social

• facebook
• instagram

DNS records live

NS

• ns1.hoststar.hosting
• ns2.hoststar.hosting

MX

• 10 mail.mandelbaum.at

Email authentication partial

SPF

v=spf1 a mx ip4:85.125.162.178 mx:convive.io include:_spf.mlsend.com include:_spf.elasticemail.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;rua=mailto:newsletter@mandelbaum.at;pct=100;aspf=r;adkim=r

policy: none (monitoring only)

DKIM

• mail: v=DKIM1; k=rsa; t=y; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3ud8pfjxo3VKNsGf7D0kNAS3SrK1QCgy2EDTXRTWetqcIYbfFl7R1ely1OKSIxxmDWva8fw16Z3RXV…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.mandelbaum.at/

present

• strict-transport-security

findings

• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (8)

• akwien.at×1
• facebook.com×1
• hgm.at×1
• hoststar.at×1
• instagram.com×1
• jmw.at×1
• onb.ac.at×1
• orf.at×1

Linked from (5)

• farbenspielerei.net×2
• charimgalerie.at×2
• vfw.or.at×1
• die-linke-grundeinkommen.de×1
• gastland-leipzig23.at×1