yaseminacar.de

HTML metadata

Technology

Server

nginx

CMS

Gatsby

Third-party hosts loaded (1)

• maxcdn.bootstrapcdn.com×1

Registration

Updated

2018-09-20

Name servers

• root-dns.netcup.net.
• second-dns.netcup.net.
• third-dns.netcup.net.

DNS records live

NS

• root-dns.netcup.net
• second-dns.netcup.net
• third-dns.netcup.net

MX

• 10 mail.yaseminacar.de
• 5 mxf950.netcup.net

Email authentication weak

SPF

v=spf1 mx a include:_spf.webhosting.systems ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://yaseminacar.de/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• acm.org×5
• ieee-security.org×4
• computer.org×3
• cps-vo.org×3
• google.de×3
• acsac.org×3
• ieee.org×3
• sigsac.org×3
• thewebconf.org×3
• usenix.org×3

Linked from (3)

• cryptojedi.org×4
• marcelfourne.de×3
• lucysimko.com×2