hallwilerseelauf.ch

HTML metadata

Technology

Server

nginx

CMS

WordPress

PHP

8.2.31 security-only

jQuery

3.7.1

Analytics

• Google Tag Manager

Third-party hosts loaded (1)

• www.googletagmanager.com×1

Social

• instagram
• facebook

DNS records live

NS

• ns.hostpoint.ch
• ns2.hostpoint.ch
• ns3.hostpoint.ch

MX

• 10 mx1.mail.hostpoint.ch
• 10 mx2.mail.hostpoint.ch

Verified for

• Google

Email authentication partial

SPF

v=spf1 include:sendgrid.net include:_bulk-spf.datasport.com include:spf.mail.hostpoint.ch ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwknWJQzLgtigRVLkQfppt+FP95KWcON397cO83oZLO00eojffBH57wIQ8TwydCKRUP+XninivRkmC0Xw9C…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDb2oZ9K3CeRntknMGle3JCaer/nWhx26SDdSd9dCgMG+QANYrqGvUB/LuQFYMIhR4OzpFAroEhv6QvFAh6ki0sQM…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://hallwilerseelauf.ch/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• swiss-athletics.ch×1
• skypixx.ch×1
• migros.ch×1
• instagram.com×1
• groupemutuel.ch×1
• facebook.com×1
• datasport.com×1
• cdninstagram.com×1
• aargauerzeitung.ch×1
• aargauersport.ch×1

Linked from (1)

• copyplay.ch×1