schilbach.ch

HTML metadata

Technology

Server

Apache

PHP

5.5.38 end of life

jQuery

1.7.1 known XSS (<3.5)

Third-party hosts loaded (1)

• code.jquery.com×1

DNS records live

NS

• nsc1.tophost.ch
• nsc2.tophost.ch

MX

• 10 mx01.tophost.ch
• 10 mx02.tophost.ch

Email authentication weak

SPF

v=spf1 ip4:193.33.128.161 include:_spf.tophost.ch +a +mx include:relay.mailchannels.net +ip4:195.182.222.78 +ip4:195.182.222.74 ~all

softfail (~all)

DMARC

not published

DKIM

• default: k=rsa; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhANRkT1MxGex+wnW7ggotxW6A5444qtmBib+Vvp7PgsQOYIIBz6Wjw6kllfUPS5xWy4hAiNmGRDLyenmnq0FcTOuuWqef78oQvO7…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked over plain HTTP: http://www.schilbach.ch/site/index.php

findings

• checked over plain HTTP
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (11)

• wikipedia.org×1
• tcs.ch×1
• stadt-tanna.de×1
• slf.ch×1
• sf.tv×1
• search.ch×1
• schilbach.net×1
• sbb.ch×1
• rittergut-schilbach.de×1
• nzz.ch×1
• 20min.ch×1

Linked from (1)

• stadtmusik-eintracht.ch×1