scouting.nl security report
Certificate, security headers, email authentication, DNS, registration, and exposed hosts — from public sources.
70risk
Elevated
Several issues worth triaging this week.
1Critical
0High
4Medium
20Low
1Info
Collected 115.5sfrom cache
- Certificate Transparency202
- DNS resolution21
- Network ownership0
- CDN / WAF detection0
- Exposed ports & CVEs8
- Registration
- DNS posture4
- Email authentication2
- Certificate
- Security headers5
- Archived URLs
- Analysis26
- noteFound 202 hostnames; this runtime allows 50 outbound requests per scan, so the 21 most likely to matter were resolved.
- noteCertificate inspection is unavailable in this runtime.
- noteNetwork ownership lookup is unavailable in this runtime; ASN and org are omitted.
- noteCDN/WAF detection is unavailable in this runtime.
final https://www.scouting.nl/status 200time 5024msstack cloudflare · Craft CMS
- ✓http:// redirects to https://
- ✓Strict-Transport-Securitymax-age=31536000
- ✓Content-Security-Policydefault-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; base-uri 'self';
- ✓Clickjacking protectionSAMEORIGIN
- ✓X-Content-Type-Optionsnosniff
- ✓Referrer-Policystrict-origin, no-referrer-when-downgrade
- –Permissions-Policyoptional
- –security.txt publishedoptional — tells researchers where to report bugs
- ✓Cookie loadmasterSecure · HttpOnly · no SameSite
- ✓Receives mail via 1 server
- !SPFends in ~allv=spf1 include:spf.protection.outlook.com include:mailplus.nl include:spf2.scouting.nl ~all
- ✓DMARCp=quarantinev=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc_agg@vali.email; fo=1;
- !MTA-STSinbound mail can be downgraded to plaintext
- ✓DNSSECanswers are signed and validated
- ✓CAA0 iodef "mailto:support@ti.scouting.nl" · 0 issue "amazon.com" · 0 issue "comodo.com" · 0 issue "letsencrypt.org"
- ✓IPv6 (AAAA)
- ✓4 nameservers
- ✓Registered with RegistrarHub30.4 years old
- –Registration expiry
- ✗Transfer locknone
- ✓4 nameservers at registry
| Address | Ports | CVEs | Edge | Network |
|---|---|---|---|---|
| 193.37.217.124 | 2122801614432222 | 0 | direct | — |
| 193.37.217.68 scouting.nl +1 | 80443 | 12 | direct | — |
scouting.nlwww.scouting.nltest-cms.scouting.nltest-hit.scouting.nltest-lsw.scouting.nltest-mes.scouting.nltest-wsj.scouting.nltest-wsm.scouting.nltest-lszw.scouting.nltest-wiki.scouting.nltest-eerde.scouting.nlcms-wp-test.scouting.nltest-civicrm.scouting.nltest-denhaag.scouting.nltest-gilwell.scouting.nltest-maasven.scouting.nltest-zeeland.scouting.nltest-regionhn.scouting.nltest-roverway.scouting.nltest-scout-in.scouting.nltest-vrijheid.scouting.nl
Archived URLs
Endpoints the Wayback Machine has kept — config files, backups, scripts. Slow to fetch, so it is here on request.