archi-far.ch

HTML metadata

Technology

Server

Apache

CMS

WordPress

jQuery

3.2.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (3)

• code.jquery.com×2
• fonts.googleapis.com×2
• www.googletagmanager.com×1

Social

• facebook
• instagram
• youtube

DNS records live

NS

• ns1.infomaniak.ch
• ns2.infomaniak.ch

MX

• 10 archifar-ch01c.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:rua+raw7rx2wv5oc@dmarcwise.email,mailto:e75e0bf761@rua.easydmarc.eu; ruf=mailto:e75e0bf761@ruf.easydmarc.eu; fo=1;

policy: reject (enforced)

DKIM

• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.archi-far.ch/

present

• strict-transport-security

findings

• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (11)

• zz-ag.ch×1
• youtube.com×1
• list-manage.com×1
• lausannemusees.ch×1
• lausanne.ch×1
• instagram.com×1
• fondationcub.ch×1
• facebook.com×1
• espazium.ch×1
• eepurl.com×1
• archi-carte.ch×1

Linked from (4)

• archi-carte.ch×1
• hhf.ch×1
• comtemeuwly.com×1
• say.ch×1