heizmann.ch
HTML metadata
Technology
- Server
- Microsoft-IIS
- jQuery
- 3.7.1
- Stack
- ASP.NET
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (3)
- www.google.com×2
- eu1-config.doofinder.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns-anycast1.hostpoint.ch
- ns-anycast2.hostpoint.ch
- ns-ch.hostpoint.ch
- MX
-
- 20 heizmann-ch.mail.protection.outlook.com
- TXT
-
klaviyo-site-verification=V2sXNv
- Verified for
-
- Atlassian
Email authentication partial
- SPF
-
v=spf1 include:sendgrid.net ip4:62.2.203.98/32 include:spf.protection.outlook.com include:spf.mailpro.com include:_spf.smtp.mailtrap.live -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=reject; rua=mailto:dmarc@heizmann.ch; ruf=mailto:dmarc@heizmann.ch; adkim=r; aspf=r; fo=1policy: none (monitoring only) · sp=reject - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBQpCmul1P+NZ7Sebqfq0iZ72Kijy5pX19pXhr23CGiSSyzcoGqk4A/pfO/KvHUZaAqmWPVjbcEz+fde80Jp…
selectors probed - selector1:
Certificate (current)
Thawte EV RSA CA G2
Expires in 216 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
frame-ancestors 'self', default-src 'self' switzerland.solar switzerland.solarlog-web.ch *.doubleclick.net *.professional.ch *.gist.build www.google.com www.youtube.com www.h-power.ch *.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.klaviyo.com code.gist.build connect.facebook.net *.doubleclick.net *.professional.ch *.customer.io *.cloudfront.net unpkg.com www.google.com www.gstatic.com *.googletagmanager.com *.google-analytics.com *.doofinder.com *.hotjar.com *.google-analytics.com switzerland.solarlog-web.ch static.klaviyo.com; style-src 'self' 'unsafe-inline' *.klaviyo.com *.googletagmanager.com *.googleapis.com unpkg.com *.doofinder.com *.hotjar.com switzerland.solarlog-web.ch; connect-src 'self' *.klaviyo.com facebook.com *.facebook.com *.sentry.io *.professional.ch wss://eu1-layer.doofinder.com wss://ws.hotjar.com *.doofinder.com *.hotjar.io *.hotjar.com *.google.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net; img-src 'self' cdnjs.cloudflare.