cornergroup.ch
HTML metadata
Technology
- Server
- Apache
- Cookie consent
-
- OneTrust
Third-party hosts loaded (2)
- assets.adobedtm.com×1
- cdn.cookielaw.org×1
DNS records live
- NS
-
- drns-bp.itsrv.plus
- drns-bp.itsrv.tech
- drns-sp.itsrv.plus
- drns-sp.itsrv.tech
- ns-bp.itsrv.plus
- ns-bp.itsrv.tech
- ns-sp.itsrv.plus
- ns-sp.itsrv.tech
- MX
-
- 20 mail-relay01.itsrv.plus
- 20 mail-relay01.itsrv.tech
- 20 mail-relay02.itsrv.plus
- 20 mail-relay02.itsrv.tech
- TXT
-
Show 7 TXT records
google-site-verification=u-hVgE0qVeUkUK_6uF9Ftujwndd_GOgZJd68eg4Gwq41c1qv31c31tvrw7dcxpr2sxpdfchbmrz_c6mn3379pbpjjddh0sggxsfuqg3r5jhdw6rtmnphsbm97f50399lrlyw96pyxk1_8e8mcreh8mucxfzy4okep5k5cqm77p5m428jnk3vyd53q5jk5xvlb5vjv8q3sn7f1zs41mfrsc1bzjz7f32y5nwddw5m5dk
Email authentication strong
- SPF
-
v=spf1 include:itsrv.tech -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; aspf=s; adkim=s; fo=0; pct=100; rua=mailto:dmarc-rua@itsrv.tech; ruf=mailto:dmarc-ruf@itsrv.techpolicy: reject (enforced) · sp=reject - DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G3 TLS ECC SHA384 2020 CA1
Expires in 237 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
microphone=(), camera=(), geolocation=()- x-content-type-options
nosniff- content-security-policy
media-src 'self' blob: https://www-t1.ittest.cornergroup.ch/ https://www-r1.prep.cornergroup.ch/ https://www.cornergroup.ch/ https://platinum.cnd.corner.ch https://platinum.cnd.cornercard.ch; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' analytics.tiktok.com https://bat.bing.com https://usercheck.tech.corner.group https://*.googleadservices.com https://*.adform.net https://*.facebook.net https://static.ads-twitter.com https://script.hotjar.com https://*.serving-sys.com https://tr.snapchat.com https://secure-ds.serving-sys.com https://static.hotjar.com https://snap.licdn.com https://googleads.g.doubleclick.net https://www.redditstatic.com https://s.pinimg.com https://s.yimg.com https://sc-static.net https://static.ads-twitter.com https://www.googletagmanager.com https://static.ads-twitter.com https://demo.dinitcs.com/ https://cdn.cookielaw.org/ https://www.google.com/ https://www.gstatic.com/ https://assets.adobedtm.com/; sty- strict-transport-security
max-age=63072000; includeSubDomains