windwerk.ch

HTML metadata

Technology

Server

Apache

CMS

WordPress 7.0

jQuery

3.7.1

Fonts

• Google Fonts

Third-party hosts loaded (5)

• fonts.googleapis.com×3
• fonts.gstatic.com×2
• gmpg.org×1
• widget.superchat.de×1
• www.google.com×1

Social

• facebook
• instagram
• linkedin
• youtube
• tiktok

Contact

Phone

• +41 52 511 80 40

Address

WINDWERK AGOhrbühlstrasse 218409 Winterthur

DNS records live

NS

• keyla.ns.cloudflare.com
• sonny.ns.cloudflare.com

MX

• 10 windwerk-ch.mail.protection.outlook.com

Verified for

• Google
• Meta
• Microsoft 365

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com include:email.freshdesk.com redirect=spf.mail.hostpoint.ch

missing all

DMARC

v=DMARC1; p=none; rua=mailto:webmaster@windwerk.ch; ruf=mailto:webmaster@windwerk.ch

policy: none (monitoring only)

DKIM

• selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUxPKdwsrk+dI4OL/Gy+5M1aIvmWFohDu2r6MzVUl0toY+jiSuOPyG7i2Z/uO8JRWe7Rmy5GVpLKQNZacsr+…
• k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://windwerk.ch/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• youtube.com×1
• tiktok.com×1
• linkedin.com×1
• instagram.com×1
• google.com×1
• facebook.com×1

Linked from (3)

• jantofilm.ch×1
• rainbow-rigging.com×1
• westsky.at×1