bbobank.ch
HTML metadata
Technology
- Server
- Apache
- jQuery
- 1.8.3 known XSS (<3.5)
- Stack
- PHP
- Fonts
-
- Google Fonts
Third-party hosts loaded (2)
- fonts.googleapis.com×2
- fonts.gstatic.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- dns1.swisscom.com
- dns2.swisscom.com
- dns3.swisscom.com
- MX
-
- 10 mail.swisscom.com
- 20 mail10.swisscom.com
- 20 mail20.swisscom.com
- TXT
-
Show 6 TXT records
swisssign-check=LvUDgm6jNqcHwygf3fIUXO6HJaoQuoVadis=c1319605-0efa-442a-9b7c-7d731f725170swisssign-check=qXEIX-DcP5qYkPb3_IvDU--_QbAswisssign-check=QByqIWBTm6VnQr3IRzzt4TLFywsswisssign-check=QnSNxkmM0STQl7qUQCSn-XmLtMQswisssign-check=R7iR7TkPmEnflDb0hBh6sqEr3bI
- Verified for
-
- Atlassian
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.swisscom.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; pct=100; rua=mailto:reports-rua@bbobank.ch; ruf=mailto:reports-ruf@bbobank.ch;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 40 days
HTTP security headers
- findings
-
- missing HSTS
- missing Content Security Policy
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy