volleyball-uckermark.de

HTML metadata

Technology

Server

nginx

jQuery

1.7 known XSS (<3.5)

Stack

PHP

Ads

• Google AdSense

Third-party hosts loaded (3)

• pagead2.googlesyndication.com×3
• banners.webmasterplan.com×2
• agentur-vida.de×1

Social

• facebook

Registration

Updated

2016-02-08

Name servers

• ns1.fizon.de.
• ns2.fizon.de.
• ns4.fizon.de.
• ns5.fizon.de.

DNS records live

NS

• ns1.fizon.de
• ns2.fizon.de
• ns4.fizon.de
• ns5.fizon.de

MX

• 10 mx1.fizon.de

Email authentication strong

SPF

v=spf1 mx a include:spf.fizon.de -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; ruf=mailto:dmarc-report@fizon.de; rua=mailto:dmarc-report@fizon.de; sp=quarantine; adkim=r; aspf=r

policy: quarantine · sp=quarantine

DKIM

• default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCz6CUvhZS/RzgJyE4L3D21BQD7g28Qb+pDc/fHV4g+D2H1oNfkoqYp+KT3bUZJYRsN7rqArvc055uk10GPBv…

selectors probed

Certificate (current) wrong cert

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked over plain HTTP: http://www.volleyball-uckermark.de/

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• webmasterplan.com×1
• um-sportbilder.de×1
• uckermark-entdecken.de×1
• tobytube.de×1
• sams-ticker.de×1
• lokal-sports.de×1
• jtfo.eu×1
• facebook.com×1
• bvv-online.de×1
• agentur-vida.de×1

Linked from (1)

• ssv-pck-90-schwedt.de×1