cla-val.ch
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
Third-party hosts loaded (2)
- assets.adobedtm.com×1
- twin-iq.kickfire.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- dns107.ovh.net
- ns107.ovh.net
- MX
-
- 1 d301082.a.ess.de.barracudanetworks.com
- 2 d301082.b.ess.de.barracudanetworks.com
- TXT
-
Show 4 TXT records
MS=ms10578691cursor-domain-verification-zdpgsq=jKQROanpyyAiaAdAK6A3pKKxD289830f5235c20b8412fc72ffa432794myedi-site-verification=crhhx2gcwj6MVkWyzH71
Email authentication strong
- SPF
-
v=spf1 ip4:46.14.16.100 mx include:spf.protection.outlook.com include:spf.evok.ch include:amazonses.com -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:its@cla-val.ch; ruf=mailto:its@cla-val.chpolicy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkNVbqcMThzsTw6rF7MZ/Mg6uY4im8ay0wME99dhCPNUuqYrxLfn1KnPtrg+H6j084S9VsK+ZyUTmWZv5bcS…
selectors probed - selector1:
Certificate (current)
R13
Expires in 21 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://www.google.com/ https://www.gstatic.com https://twin-iq.kickfire.com/ https://assets.adobedtm.com/ https://googleads.g.doubleclick.net/ https://static.doubleclick.net/ https://www.youtube.com/ https://cdn.matomo.cloud http://cdn.matomo.cloud https://clavaleurope.matomo.cloud 'unsafe-inline'