Site report for https://e-finance.postfinance.ch
Lookup another site?
| Site title | PostFinance for private customers |
|---|---|
| Site rank | 94015 |
| Description | PostFinance provides innovative and comprehensive financial services in the fields of payments, investments, retirement planning and financing. |
| Date first seen | November 2007 |
|---|---|
| Netcraft Risk Rating | 0/10 |
| Primary language | English |
| Site | https://e-finance.postfinance.ch |
|---|---|
| Netblock Owner | Post CH AG |
| Domain | postfinance.ch |
| Nameserver | dns1.post.ch |
| IP address | 194.41.166.32 (VirusTotal) |
| DNS admin | domainmanage@post.ch |
| IPv6 address | 2a00:17c9:0:103:0:0:0:20a |
| Reverse DNS | unknown |
| Domain registrar | unknown |
|---|---|
| Nameserver organisation | unknown |
| Organisation | unknown |
| Hosting company | post.ch |
| Top Level Domain | Switzerland (.ch) |
| DNS Security Extensions | unknown |
| Hosting country | CH |
| IP range | Country | Name | Description |
|---|---|---|---|
| 0.0.0.0-255.255.255.255 | N/A | IANA-BLK | The whole IPv4 address space |
| ↳ 194.0.0.0-194.255.255.255 | Netherlands | RIPE-CBLK2 | RIPE Network Coordination Centre |
| ↳ 194.41.128.0-194.41.255.255 | Switzerland | CH-POSTNETZ | Post CH AG |
| ↳ 194.41.166.32 | Switzerland | CH-POSTNETZ | Post CH AG |
| IP range | Country | Name | Description |
|---|---|---|---|
| ::/0 | N/A | ROOT | Root inet6num object |
| ↳ 2a00::/11 | European Union | EU-ZZ-2A00 | RIPE NCC |
| ↳ 2a00::/12 | Netherlands | EU-ZZ-2A00 | RIPE Network Coordination Centre |
| ↳ 2a00:17c8::/29 | Switzerland | CH-POSTNETZ-20091202 | Post CH AG |
| ↳ 2a00:17c9::/32 | Switzerland | CH-POSTFINANCE | |
| ↳ 2a00:17c9::/33 | Switzerland | CH-POSTFINANCE | |
| ↳ 2a00:17c9:0:103:0:0:0:20a | Switzerland | CH-POSTFINANCE |
| Assurance | Extended validation |
|---|---|
| Common name | e-finance.postfinance.ch |
| Organisation | PostFinance AG |
| State | Bern |
| Country | CH |
| Organisational unit | PostFinance AG |
| Subject Alternative Name | e-finance.postfinance.ch |
| Validity period | From May 9 2019 to May 9 2021 (24 months) |
| Matches hostname | Yes |
| Server | Apache |
| Public key algorithm | rsaEncryption |
| Protocol version | TLSv1.2 |
| Public key length | 2048 |
| Certificate check | ok |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 0x446c309dfab5e477ae7f90c2e76f631c2ee501de |
| Cipher | ECDHE-RSA-AES128-GCM-SHA256 |
| Version number | 0x02 |
| Perfect Forward Secrecy | Yes |
|---|---|
| Next Protocol Negotiation | Not Present |
| Supported TLS Extensions | RFC4366 server name, RFC5746 renegotiation info, RFC4492 EC point formats, RFC4366 status request |
| Issuing organisation | SwissSign AG |
| Issuer common name | SwissSign EV Gold CA 2014 - G22 |
| Issuer unit | Not Present |
| Issuer location | Not Present |
| Issuer country | CH |
| Issuer state | Not Present |
| Certificate Revocation Lists |
http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642 ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint |
| Certificate Hash | ir0pGxwFv2RekQ9rQlKaugUYYlg |
| Public Key Hash | 17dd932bb7c0cf4f85dcb66e0b090b6fec1e2fcb07e9f685f03ad8a3be86a022 |
| OCSP servers | http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642 |
| OCSP stapling response | Certificate valid |
| OCSP data generated | Feb 25 21:24:02 2020 GMT |
| OCSP data expires | Feb 28 21:24:02 2020 GMT |
Signed Certificate Timestamps (SCTs)
| Source | Log | Timestamp | Signature Verification |
|---|---|---|---|
| Certificate | Cloudflare Nimbus 2021 RJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gag= |
2019-05-09 09:43:11 | Success |
| Certificate | DigiCert Yeti 2021 XNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDso= |
2019-05-09 09:43:12 | Success |
| Certificate | Google Skydiver u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YU= |
2019-05-09 09:43:11 | Success |
| Certificate | Google Rocketeer 7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/cs= |
2019-05-09 09:43:11 | Success |
Google EV whitelist
Certificate is not in Google's EV whitelist.
SSLv3/POODLE
This site does not support the SSL version 3 protocol.
More information about SSL version 3 and the POODLE vulnerability.
Heartbleed
The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, but is using a new certificate and no longer offers Heartbeat.
This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.
| Common name | SwissSign Gold CA - G2 |
|---|---|
| Organisational unit | Not Present |
| Organisation | SwissSign AG |
| Validity period | From 2006-10-25 to 2036-10-25 |
| Common name | SwissSign EV Gold CA 2014 - G22 |
|---|---|
| Organisational unit | Not Present |
| Organisation | SwissSign AG |
| Validity period | From 2014-09-15 to 2035-03-04 |
| Netblock owner | IP address | OS | Web server | Last seen |
|---|---|---|---|---|
| Post CH AG | 194.41.166.32 | unknown | Apache | 24-Feb-2020 |
| Post CH AG | 194.41.166.32 | F5 BIG-IP | Apache | 4-Jul-2017 |
| Post CH AG | 194.41.226.13 | F5 BIG-IP | Apache | 19-May-2017 |
| Post CH AG | 194.41.226.13 | unknown | Apache | 9-Apr-2017 |
| Post CH AG | 194.41.166.32 | unknown | Apache | 1-Apr-2017 |
| Post CH AG | 194.41.226.13 | unknown | Apache | 18-Jan-2017 |
| Post CH AG | 194.41.166.32 | unknown | Apache | 6-Jan-2017 |
| Post CH AG | 194.41.226.13 | unknown | Apache | 23-Dec-2016 |
| Post CH AG | 194.41.166.32 | unknown | Apache | 31-Oct-2016 |
| Post CH AG | 194.41.226.13 | unknown | Apache | 29-Sep-2016 |
A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.
Warning: It appears that this host does not have an SPF record. There may be an SPF record on postfinance.ch: Check the site report.
Setting up an SPF record helps prevent the delivery of forged emails from your domain. Please note that an SPF record will only protect the domain it is added to and not any mail-enabled subdomains. It is recommended to add an SPF record to any subdomain with an MX record.
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.
This host does not have a DMARC record. There may be a DMARC record on the site report for postfinance.ch: Check the site report.
Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.
No known trackers were identified.
-
Includes all the main technologies that Netcraft detects as running on the server such as PHP.
-
Includes all the main technologies that run on the browser (such as JavaScript and Adobe Flash).
Technology Description Popular sites using this technology JavaScript Widely-supported programming language commonly used to power client-side dynamic content on websites vars.hotjar.com -
A content management system (CMS) is a computer program that allows publishing, editing and modifying content as well as maintenance from a central interface.
Technology Description Popular sites using this technology Adobe Experience Manager No description www.nab.com.au, www.postfinance.ch, www.barclays.co.uk -
Mobile technology is the technology used for hand held mobile devices.
Technology Description Popular sites using this technology Click to call Markup language syntax intended for devices that can place calls (e.g. phones, VoIP, etc.) www.balasai.com, www.redfin.com, www.labanquepostale.fr -
A character encoding system consists of a code that pairs each character from a given repertoire with something else such as a bit pattern, sequence of natural numbers, octets, or electrical pulses in order to facilitate the transmission of data (generally numbers or text) through telecommunication networks or for data storage.
-
HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.
Technology Description Popular sites using this technology Gzip Content Encoding Gzip HTTP Compression protocol www.tsetmc.com, www.kali.org, www.seznam.cz -
Web browser targeting enables software applications to make use of specific functions of the browser as well as optimizing the application for specific browser versions.
Technology Description Popular sites using this technology X-Content-Type-Options Browser MIME type sniffing is disabled www.googleadservices.com, www.amazon.co.uk, www.linkedin.com Strict Transport Security Web security policy mechanism whereby a web server declares that complying user agents are to interact with it using only secure HTTP connections vk.com, teams.microsoft.com, accounts.google.com Strict-Transport-Security (preload) No description www.w3schools.com, www.boursorama.com, freebitco.in X-Frame-Options Same Origin Do not allow this site to be rendered within an iframe www.google.com, paragon-na.amazon.com, secure-assets.rubiconproject.com Strict-Transport-Security (including subdomains) No description discordapp.com, static.addtoany.com, medium.com X-XSS-Protection Block Block pages on which cross-site scripting is detected lastpass.com, trello.com, self-repair.mozilla.org -
Privacy policy is a statement or a legal document (privacy law) that discloses some or all of the ways a party gathers, uses, discloses and manages a customer or client's data.
Technology Description Popular sites using this technology P3P Platform for Privacy Preferences Project allows websites to express their privacy practices pixel.mathtag.com, yandex.ru, static.olark.com -
A Document Type Declaration, or DOCTYPE, is an instruction that associates a particular SGML or XML document (for example, a webpage) with a Document Type Definition (DTD).
Technology Description Popular sites using this technology HTML5 Latest revision of the HTML standard, the main markup language on the web HTML The main markup language used for displaying web pages within browsers epace.arkansasgraphics.com, onedrive.live.com, search.norton.com -
HTML5 is a markup language for structuring and presenting content for the World Wide Web and a core technology of the Internet. It is the fifth revision of the HTML standard.
Technology Description Popular sites using this technology Viewport meta tag HTML5 tag usually used for mobile optimization -
Cascading Style Sheets (CSS) is a style sheet language used for describing the presentation semantics (the look and formatting) of a document written in a markup language (such as XHTML).
Technology Description Popular sites using this technology External Styles defined within an external CSS file www.facebook.com, www.microsoft.com, www.bitmex.com