momentumworldwide.org

HTML metadata

Technology

Server

Apache

CMS

WordPress

jQuery

2.2.4 known XSS (<3.5)

Third-party hosts loaded (3)

• ajax.googleapis.com×2
• ajax.microsoft.com×2
• cdn-images.mailchimp.com×1

Social

• twitter
• facebook
• linkedin
• instagram

Registration

Registrar

GoDaddy.com, LLC

Created

2010-10-26

Expires

2030-10-26 1606 days left

Updated

2025-12-10

Name servers

• ns1.bluehost.com
• ns2.bluehost.com

DNS records live

NS

• ns1.bluehost.com
• ns2.bluehost.com

MX

• 10 mx.spamexperts.com
• 20 fallbackmx.spamexperts.eu
• 30 lastmx.spamexperts.net

TXT

• v=DKIM1;t=s;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYk9trc8yzrL900mH11EHor77zoPfXBh0l62GQoNgXhp83lawEYMVxznwr1/JmHuctzJM1ol6ttiyE0A9GsVOfDXUYQ6BE2rB2elG2oWNFyqX9Qc1jE2QM0SDTKnknasMJmPFsH3aWc9NSwscB62E5llRM31DYeMBlmSuZ5R3pAQIDAQAB

Email authentication weak

SPF

v=spf1 a mx include:websitewelcome.com ~all

softfail (~all) · multiple SPF records

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• default: k=rsa; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAKnVzbXgw1av+HCHUKB5h5+brnM7bLM5llG1HfD0D2FWiuNtoordTy4BTbr8s9cdAQbkS3PCYvfJ8jRD8Tw5AVjalwYSp50FFHG…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.momentumworldwide.org/berlin-index/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• vimeo.com×1
• twitter.com×1
• tumblr.com×1
• linkedin.com×1
• instagram.com×1
• facebook.com×1

Linked from (1)

• ninaeschoenefeld.com×1