offpaper.app

HTML metadata

Technology

Server

nginx

Third-party hosts loaded (1)

• js.stripe.com×1

DNS records live

NS

• ns.second-ns.com
• ns1.your-server.de
• ns3.second-ns.de

MX

• 10 mail.offpaper.app

TXT

• FF74A7DBF5C1304F44D3B0C0E70BAEF38D5CB9339BBF90525258E8C17A76D912

Verified for

• Microsoft

Email authentication strong

SPF

v=spf1 +a +mx mx:your-server.de include:sendgrid.net include:spf.protection.outlook.com include:spf.brevo.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:0c5c2c0027ae.a@dmarcinput.com; adkim=r; aspf=r; pct=100

policy: reject (enforced) · sp=reject

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNOKYAqmab7vPbIXJQGwNK/c1GCp/PVr17OcQceicYfpokSz9o2QJQXgn6TucSBtFHJbodldB2xjbDmA1S…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaIebBoZxF2/Nyk1KkU6IeLXVHG9byjiYXp5upWi8UvI7G6KDYkSsjjKKjlbFO/9p+yUrBlvA52c7vWebE…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://offpaper.app/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• offpaper.de×1