verlaine-sports.be

HTML metadata

Technology

Server

Apache

CMS

WordPress 6.9.4

PHP

7.4 end of life

jQuery

1.7.2 known XSS (<3.5)

Stack

PHP

Third-party hosts loaded (2)

• ajax.googleapis.com×2
• maps.google.com×2

Social

• facebook

DNS records live

NS

• dns110.ovh.net
• ns110.ovh.net

MX

• 0 verlainesports-be02b.mail.protection.outlook.com
• 1 mx1.ovh.net
• 100 mxb.ovh.net
• 5 mx2.ovh.net

Verified for

• Google
• Microsoft 365

Email authentication weak

SPF

v=spf1 include:mx.ovh.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://verlaine-sports.be/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (25)

• veritas-opieka.pl×2
• sport-adeps.be×2
• sehmuzseokilit2.com×2
• meritkingmobilcasino.com×2
• facebook.com×2
• carnitaselguero.com×2
• vetmed-service.de×1
• rheingauschule.de×1
• nienburger-kulturwerk.de×1
• djipek.com×1
• thenorthlines.com×1
• theallengazette.com×1
• stefanieprobst.com×1
• soulnetwork.co.uk×1
• pompanodancestudio.com×1
• nationalinvestor.com×1
• munishghairealestate.com×1
• mind-bodyacupuncture.com×1
• maidstoneinvicta.co.uk×1
• lvivport.com×1
• hotelsinatra.com×1
• home-automationbynj.ch×1
• gallery-alpham.com×1
• express-tehbud.com×1
• cardfit.de×1

Linked from (1)

• verlaine.be×2