pkfcertifica.ch
HTML metadata
Technology
- CDN
- Cloudflare
- jQuery
- 3.0.0 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (5)
- ajax.aspnetcdn.com×3
- cdn.jsdelivr.net×2
- www.googletagmanager.com×2
- cdnjs.cloudflare.com×1
- kit.fontawesome.com×1
Social
DNS records live
- NS
-
- ns1.hostpiumedia.ch
- ns2.hostpiumedia.ch
- MX
-
- 0 ch-backup-mailsecurity.cybersecservices.ch
- 0 ch-mailsecurity.cybersecservices.ch
- 10 pkfcertifica-ch.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com ip4:194.158.239.134 ip4:212.98.44.27 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc-reports@pkfcertifica.ch; ruf=mailto:dmarc-failures@pkfcertifica.ch; fo=1policy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTIhrUCKBtvdqt+OeB9b+uRR+jz95nUfSPYyHkFDPoADY/EmLRHGGJYOj0cJz7Bu4Qi9pmNHXbBT4JrZhZub…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 72 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()- x-content-type-options
nosniff- content-security-policy
object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://catcher.jhnet.co.za/api/report/csp; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google-analytics.com https://cdn.jsdelivr.net https://kit.fontawesome.com https://ajax.aspnetcdn.com/ https://www.googletagmanager.com https://www.youtube.com https://cdnjs.cloudflare.com https://cdn.datatables.net/ https://connect.facebook.net https://www.google.com https://www.gstatic.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://ajax.googleapis.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://cdn.jsdelivr.net https://kit.fontawesome.com https://ka-p.fontawesome.com https://cdnjs.cloudflare.com; img-src 'self' https://www.google-analytics.com https://www.google.com https://cdnjs.cloudflare.com https://www.pkf.com https://dashboard.umbraco.com https://img.youtube.com/ https://www.googletagmanager.com https://www.facebook.com https://imgsct.cookiebot.com htt- strict-transport-security
max-age=31536000; includeSubDomains; preload- cross-origin-opener-policy
same-origin
Links to (3)
- pkf.com×1
- linkedin.com×1
- facebook.com×1