panoramaserver.at

HTML metadata

Technology

Server

Apache

CMS

Drupal

jQuery

1.10 known XSS (<3.5)

Third-party hosts loaded (3)

• panorama-blog.com×36
• panorama.blog×34
• maxcdn.bootstrapcdn.com×3

Social

• facebook
• instagram
• youtube
• linkedin

DNS records live

NS

• ns.second-ns.com
• ns1.your-server.de
• ns3.second-ns.de

MX

• 10 www552.your-server.de

Email authentication weak

SPF

v=spf1 +a +mx ?all

neutral (?all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://panoramaserver.at/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (20)

• youtube.com×1
• ttartisan.com×1
• roundshot.com×1
• riffreporter.de×1
• photoadventure.eu×1
• phillipreeve.net×1
• pblog.at×1
• panosociety.com×1
• panorama-blog.com×1
• panobu.ch×1
• novoflex.de×1
• naturpark-tiroler-lech.at×1
• mountainpanoramas.com×1
• linkedin.com×1
• instagram.com×1
• flussreporter.eu×1
• facebook.com×1
• datacolor.com×1
• canon.at×1
• bettel.at×1

Linked from (1)

• panorama.blog×1