indexo.dev

bvb.ch

.ch crawl

First seen 2026-05-30 · Last seen 2026-05-31 · ok HTTP/1.1 200 1262 ms crawled 2026-05-31

CH · 194.56.210.123 · AS43284 IWB Industrielle Werke Basel

Reputation 89/100 weak security headers dmarc partial coverage

Classifying

HTML metadata

Title
Basler Verkehrs-Betriebe
Language
de-DE
Generator
WordPress 5.4.1
Feeds

Technology

Server
Apache
CMS
WordPress 5.4.1 legacy (latest 7.0)
PHP
7.4.33 end of life
jQuery
3.2.1 known XSS (<3.5)
Stack
PHP
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.googleapis.com×1
  • s.w.org×1

Social

Contact

Email
Phone

DNS records live

NS
  • ns1.bvb.ch
  • ns2.bvb.ch
MX
  • 10 bvb-ch.mail.protection.outlook.com
TXT
  • swisssign-check=Yu7yumYwlyKiRX474mPonPVvHu4
Verified for
  • Adobe
  • Apple
  • Cisco
  • Microsoft 365

Email authentication strong

SPF
v=spf1 a:mail.bvb.ch a:smtp.bvb.ch ip4:194.56.208.107 ip4:194.56.210.72 ip4:88.99.35.117 a:postal.iot.bvb.ch include:spf.mandrillapp.com include:spf.protection.outlook.com include:postal.iot.bvb.ch -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; pct=60; rua=mailto:dmarc@bvb.ch;
policy: quarantine · pct=60
DKIM
Show 5 DKIM selectors
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDI5F7Iz7GVQhWulx9MEB7jHuXTZk+GtR0Csc4CFaefqr6GbUSy573gx9RN6hBDVLVukR8hZ/plFKmdc2mVx4…
  • selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDS4N2+KuSYuojlHJ1lkhzCGZ5dXwq1/nEr1B24u/SMLad1Kj0a5FOSyifNyUf7+F60GlKKbttFtzVYsURZ0o…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpqwJCNNQ2dMpAIWYSpmTB1A8V+ADKsoFeEmNUxHHWqbbnp4ZxPQzZZ3qVbAqW+H56qJmRKYKWlNQG3+5F…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8WRt5QdcDzS5sIeBEsjbQ4Rg60RGaU/nc5Y197U4csDnEIHARiL5bbiSXbsm1T/KHlot8beaX0jFcb4P+…
selectors probed

Certificate (current)

E8
from 2026-05-21 to 2026-08-19
Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.bvb.ch/de/

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Links to (7)

Linked from (1)