zuerilaufcup.ch
HTML metadata
Technology
- Server
- Apache
Third-party hosts loaded (3)
- monitoringapi.goldinteractive.ch×1
- www.facebook.com×1
- www.google.com×1
Social
DNS records live
- NS
-
- ns5.nine.ch
- ns6.nine.ch
- MX
-
- 10 mx1.nine.ch
- 10 mx2.nine.ch
- TXT
-
swisssign-check=LqezMSwXCmyLK8cEzaho2XJV3eI
Email authentication partial
- SPF
-
v=spf1 include:_spfip.aspectra.com include:_bulk-spf.datasport.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
SwissSign RSA TLS EV ICA 2022 - 1
Expires in 227 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- referrer-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing content type protection
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' *; font-src * data:; img-src * data:; frame-src *; frame-ancestors *.zuerilaufcup.ch *.googlesyndication.com- strict-transport-security
max-age=2592000; includeSubDomains