reparaturfuehrer.at

HTML metadata

Technology

Server

nginx

jQuery

1.11.2 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (3)

• www.googletagmanager.com×2
• ajax.googleapis.com×1
• maps.google.com×1

DNS records live

NS

• dns1.top4net.at
• dns2.top4net.at

MX

• 0 host04.aimx.at
• 9999 mxlb.ispgateway.de

Verified for

• Google

Email authentication partial

SPF

v=spf1 a include:host04.aimx.at include:aimx.at include:ispgateway.de -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc-reports@reparaturfuehrer.at; ruf=mailto:dmarc-fail@reparaturfuehrer.at; pct=100; adkim=r; aspf=r

policy: none (monitoring only)

DKIM

• default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMOZB+1agRJKrA4YBoUy4ZODB/cvAni4+rEaLQfEtzZpdTy1nRZNXl3N+JcWMKBc9E2BGtdhJ2tgl3WoPfHvG…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.reparaturfuehrer.at/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (8)

• tirol.gv.at×1
• steiermark.at×1
• salzburg.gv.at×1
• noe.gv.at×1
• land-oberoesterreich.gv.at×1
• ktn.gv.at×1
• gemeindeverband.at×1
• bmk.gv.at×1

Linked from (2)

• umwelt-tirol.at×1
• flobit.at×1