hora.ch

.ch crawl

First seen 2026-05-20 · Last seen 2026-05-20 · ok HTTP/1.1 200 4304 ms crawled 2026-05-27

CH · 80.74.142.73 · AS21069 METANET AG

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

Theater HORA - Stiftung Züriwerk und Förderverein Theater HORA

Generator

WordPress 6.9.4

Canonical

https://hora.ch/en/hora-intro/

Translations

Technology

Server: nginx
CMS: WordPress 6.9.4
jQuery: 3.4.1 known XSS (<3.5)

Third-party hosts loaded (2)

code.jquery.com×2
unpkg.com×2

Social

DNS records live

NS

ns1.proculus.sui-inter.net
ns2.proculus.sui-inter.net

MX

10 mail.hora.ch

Email authentication partial

SPF

v=spf1 include:_spf.sui-inter.net include:mandrillapp.com +mx +a ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-05-04 to 2026-08-02

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://hora.ch/en/hora-intro/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (4)

Linked from (1)

steps.ch×1