symphasis.ch

HTML metadata

Technology

Server

Apache

jQuery

3.3.1 known XSS (<3.5)

Fonts

• Google Fonts

Third-party hosts loaded (3)

• ajax.googleapis.com×1
• fonts.googleapis.com×1
• fonts.gstatic.com×1

Contact

Address

Uetlibergstrasse 231 | CH-8070 Zürich

DNS records live

NS

• dns1.credit-suisse.com
• dns2.credit-suisse.com
• dns3.credit-suisse.com
• dns4.credit-suisse.com
• jupiter.ubs.com
• mercury.ubs.com
• neptune.ubs.com
• uranus.ubs.com

MX

• 100 mx11.ubs.open.ch
• 100 mx12.ubs.open.ch
• 100 mx13.ubs.open.ch
• 100 mx14.ubs.open.ch

TXT

Show 4 TXT records

• QuoVadis=200a207d-b7d1-439c-8526-8d1de1cc0163
• _7y1clbsevwzhpmvh26cv6y480v23kyw
• _bm4e29k2cgr5b14renfpqb9ayj0ibdp
• QuoVadis=c64ccb6f-356b-4dec-9f42-f13df4fd0220

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 include:_spf.credit-suisse.com include:spf.protection.outlook.com include:_spf-hosted.credit-suisse.com include:spf-a.ubs.com include:spf-b.ubs.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc-reports-57574806756964364169@open.ch,mailto:dmarc-reports@ubs.com; ruf=mailto:dmarc-forensics@ubs.com

policy: reject (enforced)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.symphasis.ch/

present

• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing Referrer Policy
• missing Permissions Policy

Links to (1)

• ubs.com×1

Linked from (1)

• plusport.ch×1