spitalleuggern.ch

HTML metadata

Technology

Server

nginx

CMS

Joomla

jQuery

2.0.3 known XSS (<3.5)

Analytics

• Google Tag Manager

Cookie consent

• Cookiebot

Fonts

• Google Fonts

Third-party hosts loaded (4)

• ajax.googleapis.com×1
• consent.cookiebot.com×1
• fonts.googleapis.com×1
• www.googletagmanager.com×1

DNS records live

NS

• ns5.hintag.ch
• ns6.hintag.ch

MX

• 10 mail3.hintag.ch
• 20 mail4.hintag.ch

TXT

• nwd705g5rs1rdxk1mf2byh5cn5mtv4b4
• _ayaquw7j954npzbyooflqr1yjagvhwx
• N5OnpqGpuLfS+R34d3t4NcMeOPmBHHxWSvyeTvQx45DuYhtWjEunrOdDfgi60HbwKa4OsZU9ANbLkWT+IAALGw==

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 a mx a:mx3.hin.ch a:mx4.hin.ch include:spf.de.umantis.com include:spf.umantis.com include:_spf.sui-inter.net a:smtp.asana.ch include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;rua=mailto:06286b42@in.mailhardener.com

policy: quarantine · sp=quarantine

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://spitalleuggern.ch/home/

present

• strict-transport-security

findings

• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (5)

• spitalmenziken.ch×1
• megura.ch×1
• google.com×1
• asana.ch×1
• asana-geschaeftsbericht.ch×1

Linked from (1)

• fisibach.ch×1