amstein.ch
HTML metadata
Technology
- CDN
- Cloudflare
- Stack
- ASP.NET
- Analytics
-
- Cloudflare Insights
Third-party hosts loaded (2)
- schema.org×29
- static.cloudflareinsights.com×1
Social
Contact
DNS records live
- NS
-
- coby.ns.cloudflare.com
- dina.ns.cloudflare.com
- MX
-
- 10 amstein-ch.mail.protection.outlook.com
- Verified for
-
- Brevo
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 ip4:198.2.135.135 ip4:185.84.210.108 include:servers.mcsv.net include:spf.protection.outlook.com include:spf.infomaniak.com include:spf.mandrillapp.com include:spf.sendinblue.com mx ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantinepolicy: quarantine - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCi6C+9rDkQ0EYinL/UxmnOfegTRa6FCE+VUX3M90y1gmB7fniwVBL9K4YNY+VFieyFIv30DNcOGoanK/j4tu… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSrJinbfUsVqdzfQw460T2BnCD5+ffo39RS/pMKLVkULGUXBtPHNHLqNw9nrkYnywuoCsSUEjyP6c3… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 49 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self' kiwano-new.hostsolutions.ch; worker-src 'self' blob:; script-src 'self' localhost 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' www.google-analytics.com www.googletagmanager.com ssl.google-analytics.com widget.usersnap.com resources.usersnap.com *.cloudflareinsights.com *.cloudflare.com *.curator.io sibautomation.com *.sibautomation.com static-cl.icecubeapps.com connect.facebook.net amplify.outbrain.com static.hotjar.com tr.outbrain.com wave.outbrain.com script.hotjar.com googleads.g.doubleclick.net pagead2.googlesyndication.com *.botpress.cloud *.bpcontent.cloud;- strict-transport-security
max-age=15552000