papiliorama.ch

HTML metadata

Technology

CMS

WordPress 7.0

jQuery

3.7.1

Analytics

• Google Tag Manager

Third-party hosts loaded (4)

• www.googletagmanager.com×3
• 97760266.sibforms.com×1
• gmpg.org×1
• portal.sensalytics.io×1

Social

• facebook
• instagram
• youtube

DNS records live

NS

• ns1.cyon.ch
• ns2.cyon.ch

MX

• 0 papiliorama-ch.mail.protection.outlook.com

Verified for

• Brevo
• Google

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com include:spf.sendinblue.com include:spf.mailjet.com a:vpn.papiliorama.ch a:mailgw1.gilomen.org -all

strict (-all)

DMARC

not published

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaHZCpapXeHCzgMFmAqUtu5IBi/fQj6+/sl2TKKCqDi0lSpCU6GnvFGkPRkeZcHqCU98AOaHsKURKs…
• mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.papiliorama.ch/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (7)

• youtube.com×1
• itcf.ch×1
• instagram.com×1
• iabes.org×1
• facebook.com×1
• eaza.net×1
• botanica-suisse.org×1

Linked from (1)

• itcf.nl×1