xtratraillavaux.ch

HTML metadata

Technology

Server

Pepyaka

CMS

Wix

Social widgets

• YouTube Embed

Third-party hosts loaded (5)

• static.wixstatic.com×63
• static.parastorage.com×11
• siteassets.parastorage.com×4
• browser.sentry-cdn.com×1
• www.youtube.com×1

Social

• instagram
• facebook
• youtube
• linkedin

Contact

Email

• info@mysite.com
• info@xtratraillavaux.ch
• info@xtratraillavaux.chnom

Phone

• 1499935685614
• 2147483648
• 33333333333333

DNS records live

NS

• ns2.wixdns.net
• ns3.wixdns.net

MX

• 5 mta-gw.infomaniak.ch

Email authentication weak

SPF

v=spf1 include:spf.infomaniak.ch -all

strict (-all)

DMARC

not published

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xcEaUnZ4Hnsgw2puH1+DXnRS7iTILrldAD82u2UjqI3PEuh9/I/g0IIv7sP0l/QVIoczGdf0Hze0Wv0Oa…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn22sUnF5vQbGIvQNL3iYbH83wPeQy0d0uS5yoNBBOEX7ImVTRh2OrMtDSAQ/+0mjCeW3FQ2zZ3i/C3a/zR…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.xtratraillavaux.ch/

present

• strict-transport-security
• x-content-type-options

findings

• missing Content Security Policy
• missing frame protection
• missing Referrer Policy
• missing Permissions Policy

Links to (16)

• zatopekmagazine.com×1
• youtube.com×1
• trophee-lausannois.ch×1
• swisswine.com×1
• swissvolunteers.ch×1
• swiss-athletics.ch×1
• reves-suisse.ch×1
• photossports.ch×1
• linkedin.com×1
• jungfrau-marathon.ch×1
• instagram.com×1
• flickr.com×1
• facebook.com×1
• datasport.com×1
• dachhiri-dawasherpa.com×1
• compressport.com×1

Linked from (1)

• datasport.com×1