hefr.ch

HTML metadata

Title: HES-SO Fribourg | HES-SO Fribourg
Language: fr-CH

Open Graph

url: https://hefr.ch/fr/
title: HES-SO Fribourg - HES-SO Fribourg
site name: HES-SO Fribourg

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Contact

Email

info.hessofr@hefr.ch

DNS records live

NS

hefrns03.hefr.ch
hefrns04.hefr.ch
scsnms.switch.ch

MX

10 hefr-ch.mail.protection.outlook.com

TXT

Show 9 TXT records

intersight=d4c221725af20dd4bd502665fd42cb3e2663ac22177f1f4e1b75af9383e377db
have-i-been-pwned-verification=dweb_fonbm8whu4y1knbh2y5bbnjc
srzrwgzplmd9qks1yjd783vt9n050nbv
ms=ms56358537
atlassian-sending-domain-verification=bf4b8768-0952-429b-98d0-4c097aa33d6d
_sz7x46lwh7f3uitpxe2u80m64kwssyg
mindmanager-verification=6b66f534dc5970e45e9ba52378f395baf48e36a88556b9b0ef3e3aaba16f7bba
duo_sso_verification=ZAcxThWtO0B2IkTEVZkVxYJGcG8oxIg4X0wbYt7zYEQZQxITmwlCR2exHXhvZwDV
_w4ue0jegco1oolu3yquar389mgga7o5

Verified for

Adobe
Apple
Atlassian
Cisco
DocuSign
Dynamics 365
Google
Microsoft 365
OpenAI

Email authentication strong

SPF

v=spf1 ip4:160.98.8.125 ip4:160.98.8.126 include:spf.protection.outlook.com include:spf.braintreegateway.com include:servers.mcsv.net include:_spf.atlassian.net -all

strict (-all)

DMARC

v=DMARC1;p=reject;rua=mailto:abuse@hefr.ch;ruf=mailto:abuse@hefr.ch;fo=1;adkim=s;aspf=s;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFhJ2ud+h1CkVWLxwBUzHg5MvibxkPbn/rgVtpbVjDABVcHOJnFOSSbqlJBWAEwzzah2Grjimsq6F1…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-08-31 to 2026-09-02

Expires in 93 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://hefr.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-site