ribbonchallenge.nl

HTML metadata

Technology

Server

Apache

PHP

8.2.12 security-only

Fonts

• Google Fonts

Third-party hosts loaded (2)

• cdnjs.cloudflare.com×4
• fonts.googleapis.com×2

Social

• facebook
• instagram

Contact

Email

• organisatie@ribbonchallenge.nl
• inschrijvingen@ribbonchallenge.nl
• derek@ribbonchallenge.nl

DNS records live

NS

• ns3.stratoserver.net
• ns4.stratoserver.net

MX

• 10 85.215.227.120
• 100 relay.rzone.de

Email authentication strong

SPF

v=spf1 a mx ip4:85.215.227.120 -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;pct=100;rua=mailto:derek@ribbonchallenge.nl;adkim=r;aspf=r

policy: quarantine

DKIM

• dkim: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkcEp2ikFY3RdbEyMBPjcqq31tFoQLYvDhenSpg62E2y5pywyhjb31xzDRmrsD/ma2/9SUPIUx7nQx…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://ribbonchallenge.nl/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (15)

• waterlandschutters.nl×1
• wa.me×1
• schutterij.nl×1
• pinspassion.nl×1
• instagram.com×1
• hbs-artemis.nl×1
• handboogsport.nl×1
• google.nl×1
• google.com×1
• flickr.com×1
• facebook.com×1
• bootmine.com×1
• boogwereld.nl×1
• archerywebshop.com×1
• apple.com×1

Linked from (1)

• arrow94.nl×1