tpg.ch

HTML metadata

Technology

Server

nginx

CMS

Drupal

Analytics

• Google Tag Manager

Cookie consent

• Cookiebot

Third-party hosts loaded (4)

• cdn.jsdelivr.net×1
• consent.cookiebot.com×1
• tpg.hafas.cloud×1
• www.googletagmanager.com×1

Social

• facebook
• instagram
• linkedin
• youtube

DNS records live

NS

• ns1.ip-plus.net
• ns2.ip-plus.net

MX

• 5 tpg-ch.mail.protection.outlook.com

TXT

Show 11 TXT records

• MS=35F0080F1AC26D441D0B56E5184F8B86B7801EA8
• MS=ms64840924
• globalsign-domain-verification=B9EAC1679276D0367AE1520E2C247150
• miro-verification=79c79cde9549549dbed40a427a1b8f96e62da5a3
• l9r3o//MRXlq0rXnmsEhntaF2eDpRapqld2KhSUBJ/UqO0K5rkwdLoHFa328pj973V3l1E88NKfmlfy2mP7B+w==
• Sendinblue-code:54da43b8592db12700eacc7b1b7ec8b9
• google-site-verification=uNSIuke-K7Q-wGqhSvw_k_3RuZE3Ywh85OzHgkgVY6A
• apple-domain-verification=oI5lVU23g8LmsCfq
• globalsign-domain-verification=C59C5FDA925ED18B57B287BC29F7E9A4
• 8tJHrl1wxKqL2EZVA/3mEe/Xh6MidecoslDoq1V7IbGNsMC12qUJX8sBAmxE1rzOSgU79kjBM7hh1CbIIwgH3Q==
• globalsign-domain-verification=1AF0D4948E8D3EDF2D0F930B9B430AF4

Email authentication partial

SPF

v=spf1 include:spf-a.tpg.ch include:spf-b.tpg.ch include:spf-c.tpg.ch include:spf-d.tpg.ch include:spf-e.tpg.ch include:spf-g.tpg.ch include:spf-h.tpg.ch include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1;p=none;sp=none;rua=mailto:a2984469fb@rua.easydmarc.eu,mailto:dmarc-aggregate-reports@tpg.ch;ruf=mailto:a2984469fb@ruf.easydmarc.eu,mailto:dmarc-failure-reports@tpg.ch;

policy: none (monitoring only) · sp=none

DKIM

Show 5 DKIM selectors

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1Tf0FmJaC9me+6ua4rOyRh8EFKQ7nvzOe0iBAeLLY7YsxQGnjvej6vKoLIa3UTaeg6PyeBjCdmXbttsQknE…
• selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+YdfA5K8+n2Ex+yIEV4Ng+U+fTpXdfVmvSYMq6xTqzMgpdaMkJFIql0oRVNn4rhfyZYvl6Lk+AEg3ZnQlfb…
• k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w/2sqPOtL52OjEyM8mijQZkSFtbjJ/UPOZQ5CNjebZhUMVqnKDOUa/7ECuJgp7W9heWDnThd+vtxdWJYf…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3upHhSF0Utdl5EAZbpwQIKSyqsEa3oJjz8d3q207r5NH0RLTHbNPJh0sXc2tx3t8DhFE5FBYVdW+bkWRw/…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.tpg.ch/

present

• strict-transport-security
• x-frame-options
• x-content-type-options

findings

• missing Content Security Policy
• weak frame protection
• weak content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (7)

• apple.com×1
• evomoov.ch×1
• facebook.com×1
• google.com×1
• instagram.com×1
• linkedin.com×1
• youtube.com×1

Linked from (2)

• ornex.fr×1
• telepherique-du-saleve.com×1