bernasconi.ch

HTML metadata

Technology

jQuery

1.10.2 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (4)

• ajax.googleapis.com×2
• fonts.googleapis.com×2
• www.eicom.ch×1
• www.googletagmanager.com×1

Social

• linkedin
• facebook
• instagram

Contact

Email

• info@bernasconi.ch
• info@bernasconi.chofferte

Phone

• +41627878844

DNS records live

NS

• ns1.hostpark.net
• ns2.hostpark.net
• ns3.hostpark.net

MX

• 0 bernasconi-ch.mail.protection.outlook.com

TXT

• mshQgSm
• swisssign-check=r8-pa-x3KmmfPd8JduuiirvStlk
• MJTHZvhsFMn9Uo0oo9owzi5CVq/B1WiHzIDoVhGxF+hbRXBhkoubhcgqukQYY9uQAujZ1/H+MTua7HxcH5meHw==

Email authentication partial

SPF

v=spf1 +mx +ip4:93.174.187.0/24 +ip4:164.128.36.32 +ip4:81.62.230.202 +ip4:195.65.88.210 +ip4:213.200.238.89 include:spf.protection.outlook.com include:myprop.ch -all

strict (-all)

DMARC

v=DMARC1; p=none; fo=1

policy: none (monitoring only)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCHe0DPWT4ezL/6dsG6qV5XLgtYjDFEBKD4Nlh0jCB5GHjPQtLaj7hinwuOEqVGFKu6vnC77nQcB+5LCVO…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYLOtj2vAuv7AQZClhpCHPs/Zo2wuOgvca3iTYoiSFP+K2sPMwPExYVUryFwyde00YCmS1dQnI/uCJsPdc28+M4B…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.bernasconi.ch/app/easyweb/query?group=HOME

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (20)

• vsi-asai.ch×1
• smgv.ch×1
• sicherheits-charta.ch×1
• sekelskifte.com×1
• scionliving.com×1
• sandersondesigngroup.com×1
• rasch.de×1
• omexco.com×1
• masureel.com×1
• marburg.com×1
• linkedin.com×1
• komar.de×1
• instagram.com×1
• facebook.com×1
• elitis.fr×1
• eijffinger.com×1
• eicom.ch×1
• ceruniq.ch×1
• bodenschweiz.ch×1
• arte-international.com×1

Linked from (1)

• aestico.ch×1