bas.ch

HTML metadata

Technology

Server

nginx

CMS

Drupal

Third-party hosts loaded (1)

• fast.fonts.net×1

Social

• linkedin
• facebook
• instagram

DNS records live

NS

• ch.ch-inter.net
• de.ch-inter.net
• nl.ch-inter.net
• ns1.abs.ch
• ns2.abs.ch

MX

• 10 mail.swisscom.com
• 10 mail10.swisscom.com
• 10 mail20.swisscom.com

TXT

Show 7 TXT records

• MS=ms33503168
• MS=ms20925193
• atlassian-domain-verification=d3TMS2bkn8q36J/dmk8B1gEc/KatobBAdJf3TyXBorbc6IslPnvsYXWkXo7Z/Ucy
• swisssign-check=4YFk7Y_1zJZohIg8EzOq022J9RE
• mx-7c87e51fd4eea7a7
• MS=ms72608486
• MS=ms21825267

Email authentication partial

SPF

v=spf1 a mx a:mc21s1503.dnh.net ip4:185.46.59.133 ip4:10.150.4.30 include:_spf.sui-inter.net include:servers.mcsv.net include:spf.swisscom.com include:spf.umantis.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:reports-rua@bas.ch; ruf=mailto:reports-ruf@bas.ch;

policy: none (monitoring only)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.bas.ch/fr

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• abs.ch×1
• facebook.com×1
• febea.org×1
• gabv.org×1
• instagram.com×1
• linkedin.com×1

Linked from (1)

• festivaldufilmvert.ch×1