goodit.ch — domain check, WHOIS, DNS & reputation

HTML metadata

Title

GoodIT – IT-Sicherheitsberatung & Cyber Security Nidwalden

Description

Professionelle IT-Sicherheitsberatung: Wir sichern Ihre IT mit Risikoanalysen, Notfallplänen, Awareness-Trainings und CISO as a Service. Cyber Security,

Language

de-CH

Generator

WordPress 7.0

Canonical

https://www.goodit.ch/

Feeds

Open Graph

url: https://www.goodit.ch/
title: GoodIT – IT-Sicherheitsberatung & Cyber Security Nidwalden
locale: de_DE
site name: GoodIT – Cyber Security Nidwalden
description: Professionelle IT-Sicherheitsberatung: Wir sichern Ihre IT mit Risikoanalysen, Notfallplänen, Awareness-Trainings und CISO as a Service. Cyber Security,
updated time: 2026-05-23T13:21:52+02:00

Technology

Server: nginx
CMS: WordPress 7.0
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×3
cdn.jsdelivr.net×2
www.googletagmanager.com×2

Social

Contact

Email

DNS records live

NS

ns.hostpoint.ch
ns2.hostpoint.ch
ns3.hostpoint.ch

MX

10 goodit-ch.mail.protection.outlook.com

TXT

ccfff1a1ba268fa8dfc6d50b5d628d2d
sophos-domain-verification=eb8a5a902f759ba3f3794c63fb956308dc70e1d3d4e6e13f5904b4daa858662c

Verified for

1Password
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mail.hostpoint.ch -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;pct=100;rua=mailto:dmarc-report-aggregate@goodit.ch;ruf=mailto:dmarc-report@goodit.ch;ri=86400;aspf=r;adkim=r;fo=0;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtS16jXiaclwgyxlOKk4Lsg6q2yGUnhKDwViP/4y4FbfoVH3Sdr8UnkPRO6QYO4/T3KR7glHyJVuP1…

selectors probed

Certificate (current)

R13

from 2026-05-20 to 2026-08-18

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.goodit.ch/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.nist.gov; font-src 'self'; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; frame-src https://outlook.office365.com https://outlook.office.com; object-src 'none'; base-uri 'self'; form-action 'self' https://outlook.office365.com; frame-ancestors 'self'; upgrade-insecure-requests
strict-transport-security: max-age=31536000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin

Links to (3)

Linked from (1)

fortcontrol.io×1