fr.ch
HTML metadata
Technology
- Server
- nginx
- CMS
- Drupal
- jQuery
- 3.6.4
- Fonts
-
- Google Fonts
Third-party hosts loaded (6)
- cdn.jsdelivr.net×3
- cdn.facil-iti.app×1
- code.jquery.com×1
- fonts.googleapis.com×1
- fribourggpt.prod.cluster.liipgpt.ch×1
- www.google.com×1
Social
DNS records live
- NS
-
- spfrns01.fr.ch
- spfrns02.fr.ch
- MX
-
- 100 fr-ch.mail.protection.outlook.com
- TXT
-
Show 5 TXT records
newsletter.infomaniak.com ?allciscocidomainverification=20e68c70f1cee8a0796afb58007a311404809b10714e8525b6ffe1f17411f09dswisssign-check=LgatPVYUZwQdMepTbsgeqq6fZM5PpZBmYctNaLQv7f0q+OyNxicLBiRI/ey6sRky6rVlu1YwFOmBalsG4iXha+YLT+tT9URpPRLJUzeoDWKg7kBb6rvE1MpTbUDUCWBw==swisssign-check=fORJ-Q-M2c1luL1zfQmKU-jTgg4
- Verified for
-
- Apple
- Meta
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 mx ip4:156.25.4.0/24 ip4:94.103.96.128/27 ip4:94.103.97.242 ip4:94.103.96.114 ip4:94.103.96.190 ip4:212.117.124.7 ip4:72.52.186.92 ip4:194.60.217.89 ip4:195.15.209.217 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/19 ip4:195.70.1.155 ip4:45.157.189.158 ip4:148.196.30.0/24 ip4:93.187.192.249 ip4:18.194.171.169 ip4:35.157.127.76 ip4:3.127.159.201 ip4:3.78.1.223 ip4:194.88.197.144 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 include:servers.mcsv.net include:spf.protection.outlook.com include:spf.event-works.com include:spf.infomaniak.com include:spf.secemail.ch -allstrict (-all) - DMARC
-
v=DMARC1;p=none;sp=none; pct=100;rua=mailto:dmarc_agg@vali.email; ruf=mailto:Sitel-security-alert@fr.chpolicy: none (monitoring only) · sp=none - DKIM
-
Show 4 DKIM selectors
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqvaep51CsgnLZGj/ce6joIbF5Kl08SoH2dhGXrHSdXpklgf26ls0yLtNHmZ07aVlXfDV+rdvcA91w… - selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDz60ysbcfwf0TFWbs2I2IY3IiOkxYJP+u9ieyCjggt4WMNGwf4ANTBbu6xDVY0juSWPaPeeCsnEEYw87tm0… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/TOaNariOVgWgeoD7qB/lSjipE3WL8co/aPKufzU2/J59dPS43Xq+OoO7ElLUzZWWTVjRDwBzu1GY… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
selectors probed - default:
Certificate (current)
RapidSSL TLS RSA CA G1
Expires in 33 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.fr.ch themes.googleusercontent.com www.google.com www.gstatic.com www.youtube-nocookie.comv www.youtube.com/iframe_api www.youtube.com/s/player/ *.wabsys.ch *.facil-iti.app *.facil-iti.com js-agent.newrelic.com bam.nr-data.net kit.fontawesome.com cse.google.com clients1.google.com https://cdn.jsdelivr.net https://unpkg.com https://webform.statslive.info https://newsletter.infomaniak.com https://cdn.datatables.net https://visualize.admin.ch/ https://code.jquery.com/jquery-3.6.4.min.js https://opendata.fr.ch https://fribourggpt.prod.cluster.liipgpt.ch https://eu.altcha.org/js/latest/altcha.min.js https://newsletter.storage5.infomaniak.com/mcaptcha/altcha.js; img-src 'self' data: https://*.fr.ch/ *.unifr.ch www.google.ch www.google.com https://*.basemaps.cartocdn.com https://*.ytimg.com fonts.gstatic.com clients1.google.com *.gstatic.com www.googleapis.com https://bafu.meteotest.ch https://visualize.admin.ch/ https://datawrapper.dw- strict-transport-security
max-age=31536000; includeSubDomains
Links to (6)
- digi-fr.ch×1
- ecasfr.ch×1
- facebook.com×1
- instagram.com×1
- linkedin.com×1
- twitter.com×1