therapeuten.de

HTML metadata

Technology

Server

Apache

jQuery

3.2.1 known XSS (<3.5)

Stack

PHP

Fonts

• Google Fonts

Third-party hosts loaded (4)

• cdnjs.cloudflare.com×2
• fonts.googleapis.com×2
• ajax.googleapis.com×1
• app.mailjet.com×1

Social

• facebook
• twitter

Contact

Email

• newsletter@therapeuten.de

Registration

Updated

2018-09-06

Name servers

• ns1081.ui-dns.biz.
• ns1081.ui-dns.com.
• ns1081.ui-dns.de.
• ns1081.ui-dns.org.

DNS records live

NS

• ns1081.ui-dns.biz
• ns1081.ui-dns.com
• ns1081.ui-dns.de
• ns1081.ui-dns.org

MX

• 10 mx00.ionos.de
• 10 mx01.ionos.de

Email authentication partial

SPF

v=spf1 include:agenturserver.de include:_spf-eu.ionos.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://therapeuten.de/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (17)

• youtube.com×1
• webspaceconfig.de×1
• verhaltenstherapie-webverzeichnis.de×1
• twitter.com×1
• traumatherapie-webverzeichnis.de×1
• tantramassage-portal.de×1
• systemischetherapeuten.de×1
• sexualtherapeuten.org×1
• seminare-datenbank.de×1
• kinesiologie-webverzeichnis.de×1
• integrative-atemtherapie.de×1
• hypnotherapie-webverzeichnis.de×1
• homoeopathie-therapeuten.de×1
• facebook.com×1
• dorn-breuss-portal.de×1
• craniosacral-portal.de×1
• ausbildungsinstitute.de×1

Linked from (12)

• therapeuten-shop.de×1
• dorn-methode-therapeuten.de×1
• craniosacral-therapeuten.de×1
• seminare-datenbank.de×1
• integrative-atemtherapie.de×1
• systemischetherapeuten.de×1
• ausbildungsinstitute.de×1
• dorn-breuss-portal.de×1
• tantramassage-portal.de×1
• craniosacral-portal.de×1
• bioresonanz-baden-baden.de×1
• bioresonanz-karlsruhe.de×1