neue-burg.at

HTML metadata

Technology

Server

nginx

PHP

5.6.40 end of life

jQuery

1.8 known XSS (<3.5)

Stack

PHP

Third-party hosts loaded (2)

• ajax.googleapis.com×1
• code.jquery.com×1

DNS records live

NS

• ens01.drei.host
• ens02.drei.host

MX

• 10 mailx.drei.at

Email authentication weak

SPF

v=spf1 include:_spf-t2.sil.at include:_spf-sil.sil.at include:_spf_mtab.drei.at -all

strict (-all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.neue-burg.at/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (3)

• nauders.com×1
• feratel.com×1
• cleverreach.de×1

Linked from (14)

• familienhotels-tirol.ch×1
• skihotels-tirol.ch×1
• ski-familienurlaub.com×1
• hotels-kuscheln.at×1
• hotels-familie.at×1
• biken-hotels.at×1
• romantikresorts.at×1
• hotels-tirol.ch×1
• schi-hotels.at×1
• urlauben-oesterreich.at×1
• oesterreich-familienhotels.at×1
• familie-hotels.at×1
• aktiv-hotels.com×1
• wandern-hotels.at×1