umb.ch
HTML metadata
Technology
- Server
- nginx
Social
Contact
- Phone
DNS records live
- NS
-
- a1-165.akam.net
- a11-65.akam.net
- a13-65.akam.net
- a16-67.akam.net
- a26-67.akam.net
- a6-67.akam.net
- MX
-
- 0 umb-ch.mail.protection.outlook.com
- TXT
-
swisssign-check=aO9NbZs2Z-oYkjpRWpcw1Fog_78yokoy-domain-verification=6bfbd4542ef9eb015baffdb54beb6671b940ba4b863bfb4a85aa81179a15d916dMWZ+OxXMkrBC2Gp+uo16C07IAvvGJiP+75n+IcEV80=
- Verified for
-
- Apple
- Atlassian
- Miro
Email authentication strong
- SPF
-
v=spf1 mx include:_spf-it.umb.ch include:_spf-dc.umb.ch include:_spf-ext.umb.ch include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc.reports@umb.ch; ruf=mailto:dmarc.reports@umb.ch; sp=none; fo=1; pct=100policy: reject (enforced) · sp=none - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT/Z7RTYddKDBh10Aa/VvGHz+1FztEzn2fNBZjcBa5Tcl8fRy/0aY/tPBOb1A368rpf2LxjqiA3ycM… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG7PMNyLrFTabfw29mgv4QgUDxgiN7/1ZONfwUdwYrlAyJbqPwUHOdnQSf7WIlPkUSPYsEegXCAUHz… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDYAgOAB2j9aYTWP+sHs30p3OIXb/kIEMr9sh6tNd8ZelHF0kRImdW2byn4YsKDyqLZ+blFw2ixekwQ1mx… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5udWs5wO/NuSqYvvfKJqnlzrN/vTLIv0G99kTMTRJCkZ8LSGMRlc4PJZx0h6gxSOKzsIfS9+OceD+wiCRD…
selectors probed - selector1:
Certificate (current)
R12
Expires in 26 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), encrypted-media=*- x-content-type-options
nosniff- content-security-policy
default-src blob: data: https: 'unsafe-inline' 'unsafe-eval' 'self' stats.addtoany.com talkify.net elfsight.com static.elfsight.com www.facebook.com stats.g.doubleclick.net hubspot-forms umb.eyevip.ch use.typekit.net static.addtoany.com www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com connect.facebook.net facebook.com *.3qsdn.com; img-src 'self' *.elfsightcdn.com img.youtube.com maps.gstatic.com maps.googleapis.com perf.hsforms.com www.google-analytics.com *.google.com *.google.at www.facebook.com track.hubspot.com *.ads.linkedin.com *.3qsdn.com forms-na1.hsforms.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' elfsight.com static.elfsight.com js.hsleadflows.net maps.googleapis.com www.gstatic.com umb.eyevip.ch www.google.com www.google-analytics.com www.googletagmanager.com snap.licdn.com forms.hsforms.com js.hsforms.net static.addtoany.com *.hs-scripts.com cdnjs.cloudflare.com js.hs-analytics.net js.hs-banner.com *.youtube.com connect.faceb- strict-transport-security
max-age=31536000;, max-age=31536000; includeSubdomains;
Links to (6)
- facebook.com×1
- instagram.com×1
- kununu.com×1
- linkedin.com×1
- xing.com×1
- youtube.com×1
Linked from (2)
- scsum.ch×1
- fuw-forum.ch×1