crb.ch

HTML metadata

Technology

Server

Caddy

CMS

Gatsby

PHP

8.2.29 security-only

jQuery

3.6.0

Analytics

• Google Tag Manager

Social widgets

• YouTube Embed

Third-party hosts loaded (4)

• cdnjs.cloudflare.com×4
• cdn.jsdelivr.net×1
• www.googletagmanager.com×1
• www.youtube-nocookie.com×1

Social

• youtube
• linkedin

Contact

Email

• info@crb.ch
• info@crb.chstandorte

Phone

• +41 44 456 45 45

DNS records live

NS

• ns1.crb.ch
• ns2.crb.ch

MX

• 0 crb-ch.mail.protection.outlook.com

TXT

Show 4 TXT records

• 8a9a7eec6f4d72b904e91f0cd266110d
• 9c1e8f09-549d-4ed3-a3aa-b8635fc146bf
• MS=1D472C5F5EE2BF2FCC1B427316401DBFC4054C18
• bw=rtlrptDoTgvupflnKkQCkdcXWNNqpALw2DmRYLZSLBv3

Verified for

• Adobe
• Atlassian

Email authentication strong

SPF

v=spf1 a include:spf.hornetsecurity.com include:spf.protection.outlook.com include:spf-de.emailsignatures365.com ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; pct=100

policy: reject (enforced)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5C4/1aPJ1gxWPDzcwpgsxgHSQiNp/cdgrVKonHw+iAhLG7TewzXQ1Vy2ivOAHi8oblPLgLshkG9qeOOOTtr…
• selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoUzv/DnoL8YEwV1CaNBC3iimQrSIxXTIUsFb/KLXesaWkruNCoYzvPwm2/BJwixqaml8Pg+C1/Stx6nTm5q…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.crb.ch/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• youtube.com×1
• youtu.be×1
• spotify.com×1
• linkedin.com×1
• eepurl.com×1
• apple.com×1

Linked from (4)

• swki.ch×1
• flo-leckortung.ch×1
• aestico.ch×1
• iolabs.ch×1