shop-heimstaettenwil.ch
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- PHP
- 8.2.31 security-only
Social
Contact
DNS records live
- NS
-
- ns2.glaro.ch
- ns3.glaro.ch
- ns4.glaro.ch
- MX
-
- 0 shop-heimstaettenwil.ch
- 20 smtp2.glarotech.ch
Email authentication weak
- SPF
-
v=spf1 +a +mx +ip4:62.12.149.245 +ip4:193.247.72.216 ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl/HhMVOdE63dnlTyDir3/pWpGqivcNam15w/J1vsyeV4oGUBfiRziwlvhhcGHrLgtBhULDp+6pi/F…
selectors probed - default:
Certificate (current)
YR2
Expires in 86 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
usb=(self)- x-content-type-options
nosniff- content-security-policy
default-src https: 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: blob:; frame-src https:; connect-src * data:; worker-src https: blob:; style-src 'self' 'unsafe-eval' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' 'unsafe-eval' 'unsafe-inline' https://fonts.gstatic.com;report-uri https://sentry.service.glarotech.ch/api/2/security/?sentry_key=4ed09644e0464ab694f1c5decaf83a31;