sbs-mechanik.ch

.ch crawl

First seen 2026-05-29 · Last seen 2026-05-29 · ok HTTP/1.1 200 496 ms crawled 2026-05-31

CH · 217.26.53.12 · AS29097 Hostpoint AG

Reputation 84/100 spf without fallback no dmarc policy

Classifying

HTML metadata

Title
SBS-Mechanik GmbH - Ihr Spezialist für Metallbau, Garagentore und Spezialanfertigungen
Description
SBS-Mechanik GmbH - Ihr Spezialist für Metallbau, Garagentore und Spezialanfertigungen
Language
de
Generator
CMSimple_XH 1.8 2024121101 - www.cmsimple-xh.org

Technology

Server
Apache
CMS
Joomla 1.8
jQuery
3.2.1 known XSS (<3.5)

Social

DNS records live

NS
  • ns.hostpoint.ch
  • ns2.hostpoint.ch
  • ns3.hostpoint.ch
MX
  • 10 mx1.mail.hostpoint.ch
  • 10 mx2.mail.hostpoint.ch

Email authentication weak

SPF
v=spf1 redirect=spf.mail.hostpoint.ch
missing all
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-24 to 2026-08-22
Expires in 82 days

HTTP security headers

Header hygiene 65/100 Checked live page: https://sbs-mechanik.ch/

present
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-resource-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
Header values
referrer-policy
same-origin
permissions-policy
accelerometer=('none'), ambient-light-sensor=('none'), autoplay=('none'), battery=('none'), camera=('none'), clipboard-read=(), clipboard-write=(), cross-origin-isolated=(), display-capture=('none'), encrypted-media=('none'), execution-while-not-rendered=('none'), execution-while-out-of-viewport=('none'), fullscreen=('self'), gamepad=(), geolocation=('self'), gyroscope=('none'), interest-cohort=(true), magnetometer=('none'), microphone=('none'), midi=('none'), navigation-override=('none'), payment=('none'), picture-in-picture=('none'), publickey-credentials-get=('none'), screen-wake-lock=('none'), speaker-selection=(), sync-xhr=('none'), usb=('none'), web-share=('none'), xr-spatial-tracking=('none')
x-content-type-options
nosniff
content-security-policy
upgrade-insecure-requests; default-src 'self'; base-uri 'self'; font-src 'self' data:; img-src 'self' data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' data:; style-src 'unsafe-inline' 'unsafe-eval' 'self' data:
cross-origin-resource-policy
same-site

Links to (2)

Linked from (1)