bobutter.ch

HTML metadata

Technology

Server

nginx

jQuery

1.11.3 known XSS (<3.5)

Stack

PHP

Analytics

• Google Analytics

Fonts

• Google Fonts

Third-party hosts loaded (4)

• fonts.googleapis.com×4
• ajax.googleapis.com×1
• ssl.google-analytics.com×1
• www.google.com×1

Contact

Email

• t5kx1a==e#e!iavxvfabdvvlnebo2lk+6g==@bobutter.ch
• info@bobutter.ch

Phone

• 031 359 56 11

DNS records live

NS

• ns11.webagentur.hosting
• ns12.webagentur.hosting
• ns13.webagentur.hosting

MX

• 0 mail.swissmilk.ch

TXT

• knowbe4-site-verification=d1e53122ba39d030677e67dcdde4fcd8

Email authentication strong

SPF

v=spf1 mx a:mail.swissmilk.ch include:spf.protection.outlook.com include:_spf.ch-dns.net

missing all

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:re+dt9js9unjl9@dmarc.postmarkapp.com; sp=reject; aspf=r;

policy: reject (enforced) · sp=reject

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jD/VEzfAghxRL5Popdk82xRQG/qbXtpuOXvuVuDyeniPvJrVe3K5ESvwlHL/RLRggKHFYpgChzec4…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.bobutter.ch/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (3)

• web-agentur.ch×1
• luzerner-wochenmarkt.ch×1
• google.com×1

Linked from (1)

• tsmsolutions.ch×1