hogum
scouting.nl

scouting.nl security report

Certificate, security headers, email authentication, DNS, registration, and exposed hosts — from public sources.

70risk

Elevated

Several issues worth triaging this week.

1Critical
0High
4Medium
20Low
1Info
Collected 115.5sfrom cache
  1. Certificate Transparency202
  2. DNS resolution21
  3. Network ownership0
  4. CDN / WAF detection0
  5. Exposed ports & CVEs8
  6. Registration
  7. DNS posture4
  8. Email authentication2
  9. Certificate
  10. Security headers5
  11. Archived URLs
  12. Analysis26
  • noteFound 202 hostnames; this runtime allows 50 outbound requests per scan, so the 21 most likely to matter were resolved.
  • noteCertificate inspection is unavailable in this runtime.
  • noteNetwork ownership lookup is unavailable in this runtime; ASN and org are omitted.
  • noteCDN/WAF detection is unavailable in this runtime.
final https://www.scouting.nl/status 200time 5024msstack cloudflare · Craft CMS
  • http:// redirects to https://
  • Strict-Transport-Security
    max-age=31536000
  • Content-Security-Policy
    default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; base-uri 'self';
  • Clickjacking protection
    SAMEORIGIN
  • X-Content-Type-Options
    nosniff
  • Referrer-Policy
    strict-origin, no-referrer-when-downgrade
  • Permissions-Policyoptional
  • security.txt publishedoptional — tells researchers where to report bugs
  • Cookie loadmaster
    Secure · HttpOnly · no SameSite
  • Receives mail via 1 server
  • !SPFends in ~all
    v=spf1 include:spf.protection.outlook.com include:mailplus.nl include:spf2.scouting.nl ~all
  • DMARCp=quarantine
    v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc_agg@vali.email; fo=1;
  • !MTA-STSinbound mail can be downgraded to plaintext
AddressPortsCVEsEdgeNetwork
193.37.217.124
2122801614432222
0direct
193.37.217.68
80443
12direct
Archived URLs

Endpoints the Wayback Machine has kept — config files, backups, scripts. Slow to fetch, so it is here on request.