studienstiftung.ch

HTML metadata

Technology

Server

Apache

CMS

WordPress

jQuery

1.12.4 known XSS (<3.5)

Stack

PHP

Fonts

• Google Fonts

Third-party hosts loaded (4)

• fonts.googleapis.com×2
• www.fondazionestudi.ch×1
• www.fondetudes.ch×1
• www.studyfoundation.ch×1

Social

• facebook
• twitter
• instagram
• linkedin

DNS records live

NS

• ns.hostpoint.ch
• ns2.hostpoint.ch
• ns3.hostpoint.ch

MX

• 10 mx-cluster01-hz13.hornetsecurity.ch
• 20 mx-cluster02-hz13.hornetsecurity.ch
• 30 mx-cluster03-hz13.hornetsecurity.ch
• 40 mx-cluster04-hz13.hornetsecurity.ch

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.hornetsecurity.com -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;pct=100;rua=mailto:info@oneict.ch

policy: quarantine

DKIM

• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.studienstiftung.ch/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (8)

• twitter.com×1
• studyfoundation.ch×1
• sterling-adventures.co.uk×1
• linkedin.com×1
• instagram.com×1
• fondetudes.ch×1
• fondazionestudi.ch×1
• facebook.com×1

Linked from (4)

• fondazionestudi.ch×1
• studyfoundation.ch×1
• fondetudes.ch×1
• lerjentours.ch×1