frischesbrot.ch
HTML metadata
Technology
- CMS
- Gatsby
- Stack
- PHP
Social
DNS records live
- NS
-
- ns1.cyon.ch
- ns2.cyon.ch
- MX
-
- 0 mail.frischesbrot.ch
Email authentication weak
- SPF
-
v=spf1 +a +mx +ip4:194.126.200.0/24 +ip4:149.126.0.0/21 -allstrict (-all) - DMARC
- not published
- DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8avbLLy3O1iB1bySijSOynlPe7E/Bgy83iw+ITaAWWc7PjhAMTDCzpQQF1alSLhu+F73Rpyutd2Lkt…
selectors probed - default:
Certificate (current)
R13
Expires in 68 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
font-src *.gstatic.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ checkout.postfinance.ch www.google.com https://app-wallee.com https://checkout.postfinance.ch 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics