sportlers.at
HTML metadata
Technology
- Server
- Apache
- jQuery
- 3.4.1 known XSS (<3.5)
Third-party hosts loaded (4)
- unpkg.com×4
- code.jquery.com×3
- cdn.jsdelivr.net×2
- elfsightcdn.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns1.web-crossing.net
- ns2.web-crossing.net
- ns3.web-crossing.net
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- Verified for
-
- Microsoft 365
Email authentication weak
- SPF
-
v=spf1 include:spf.protection.outlook.com include:spf.hornetsecurity.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JjL9FhMATTo5Gh+XEkw8WKQDCahXCY1BG3MKXM3ypTx4ybx17ksm8GYyNtoc3slpNt/XRuHDZBBaF…
selectors probed - selector1:
Certificate (current)
RapidSSL TLS RSA CA G1
Expires in 101 days
HTTP security headers
- present
-
- strict-transport-security
- x-content-type-options
- findings
-
- missing Content Security Policy
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- strict-transport-security
max-age=31536000; includeSubDomains