Back to results

Digital exposure report

ubs.com

Good shape, with a few gaps worth closing this quarter.

Scanned: 2026-11-15 19:22 UTC

Partial coverage: the score is based on 95% of applicable check weight. 1 unverified check(s) are excluded, not counted as failures.

B
82/100

What to do first

  1. 1.

    Choose which companies may issue certificates for your domain

    This reduces the chance of a certificate being issued by a provider you did not choose.

    Who can fix it: Your domain registrar or DNS provider

    How to verify after the fix

    dig +short CAA ubs.com
  2. 2.

    Stop browsers from guessing file types

    This removes one way a file could be treated as something it is not.

    Who can fix it: Your website developer or web host

    How to verify after the fix

    curl -sIL https://ubs.com/ | grep -i "X-Content-Type-Options"

A starting point, not a security guarantee.

What this grade means

Tested hostname
ubs.com
Website request
GET https://ubs.com/ → https://www.ubs.com/
Scan time
2026-11-15 19:22:35 UTC
Grading method
Version 2How grading works
Unverified or excluded checks
  • DKIM — digital signature on email · Not detected (common selectors only)

This is a snapshot of the public configuration checks listed in this report. It does not verify the site's owner, business legitimacy, application security, or absence of vulnerabilities. It is not a security certification.

Score by category

Email security25/25Spoofing email from this domain is hard.
Encryption & certificate25/25Traffic to the site is encrypted and the certificate is valid.
Browser protections18/30Some browser protections are missing.
DNS infrastructure10/15The domain's infrastructure works, but recommended hardening is missing.

Fix priorities

  1. 1.LowCAA — who may issue certificates · Hardening gap+5
  2. 2.LowX-Content-Type-Options · Hardening gap+4
  3. 3.LowReferrer-Policy · Hardening gap+3
  4. 4.LowPermissions-Policy · Hardening gap+2
  5. 5.LowCSP — protection from script injection · Hardening gap+3

To verify

Couldn't be confirmed from public data, so excluded from the score. Checking them clarifies your posture; it doesn't guarantee a score change.

  • DKIM — digital signature on email

Findings

SPF — who may send mail for the domain

Passed · Severity: OK · 10/10

An authorized sender list is defined and mail from other servers is rejected.

Valid SPF record with -all. 5 of the 10 allowed DNS lookups.

Source data: DNS TXT ubs.com
v=spf1 include:spf-a.ubs.com include:spf-b.ubs.com include:spf-hosted.ubs.com include:spf.protection.outlook.com include:_spf.credit-suisse.com -all
$ dig +short TXT ubs.com
Documentation: RFC 7208 — SPF (https://www.rfc-editor.org/rfc/rfc7208) · M3AAWG — Email Authentication Best Practices (https://www.m3aawg.org/sites/default/files/m3aawg-email-authentication-recommended-best-practices-09-2020.pdf)

DMARC — anti-spoofing policy

Passed · Severity: OK · 15/15

Forged email in the company's name is blocked by mail servers.

Policy p=reject.

Source data: DNS TXT _dmarc.ubs.com
v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-reports-57574806756964364169@open.ch,mailto:dmarc-reports@ubs.com; ruf=mailto:dmarc-forensics@ubs.com; rf=iodef; pct=100; ri=86400
$ dig +short TXT _dmarc.ubs.com
Documentation: RFC 7489 — DMARC (https://www.rfc-editor.org/rfc/rfc7489) · dmarc.org — FAQ (https://dmarc.org/resources/frequently-asked-questions/)

DKIM — digital signature on email

Not detected (common selectors only) · Severity: OK · Not scored

No DKIM key was found under the common selectors we probed. That doesn't mean DKIM is missing — selectors can't be listed from public DNS. Not scored.

A missing name for a probed selector (NXDOMAIN/NODATA) only means that selector isn't published. DKIM is marked unverified and excluded from the score. Check a sent message's Authentication-Results for dkim=pass and its s= selector.

Source data: DNS TXT <selector>._domainkey.ubs.com
Selectors checked: google, selector1, selector2, default, k1, s1, s2, dkim, mail, smtp — no key found
google._domainkey: nxdomain
selector1._domainkey: nxdomain
selector2._domainkey: nxdomain
default._domainkey: nxdomain
k1._domainkey: nxdomain
s1._domainkey: nxdomain
s2._domainkey: nxdomain
dkim._domainkey: nxdomain
mail._domainkey: nxdomain
smtp._domainkey: nxdomain
$ dig +short TXT google._domainkey.ubs.com
Documentation: RFC 6376 — DKIM (https://www.rfc-editor.org/rfc/rfc6376) · M3AAWG — Email Authentication Best Practices (https://www.m3aawg.org/sites/default/files/m3aawg-email-authentication-recommended-best-practices-09-2020.pdf)

MX — inbound mail routing

Passed · Severity: OK · unscored

Mail exchangers are published for the domain.

4 MX record(s). This shows where inbound mail is routed, not whether mail is sent from the domain.

Source data: DNS MX ubs.com
100 mx11.ubs.open.ch
100 mx12.ubs.open.ch
100 mx13.ubs.open.ch
100 mx14.ubs.open.ch
$ dig +short MX ubs.com
Documentation: RFC 7505 — Null MX (https://www.rfc-editor.org/rfc/rfc7505) · RFC 5321 §5.1 — Locating the target host (https://www.rfc-editor.org/rfc/rfc5321#section-5.1)

HTTPS available

Passed · Severity: OK · 10/10

The site loads over an encrypted connection.

https://ubs.com/ returned HTTP 403 (final URL: https://www.ubs.com/). Client-side certificate validation passed.

Source data: HTTPS GET https://ubs.com/
HTTP 403
Final URL: https://www.ubs.com/
$ curl -sIL https://ubs.com/
Documentation: OWASP — Transport Layer Security Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Security_Cheat_Sheet.html) · Mozilla — Server Side TLS (https://wiki.mozilla.org/Security/Server_Side_TLS)

HTTP → HTTPS redirect

Passed · Severity: OK · 7/7

Visitors arriving at an unencrypted address are automatically sent to the secure version.

HTTP 302 → https://www.ubs.com/

Source data: HTTP GET http://ubs.com/ (redirects not followed)
HTTP 302
Location: https://www.ubs.com/
$ curl -sI http://ubs.com/ | grep -iE "^(HTTP|location)"
Documentation: OWASP — Transport Layer Security Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Security_Cheat_Sheet.html) · RFC 6797 — HSTS (https://www.rfc-editor.org/rfc/rfc6797)

SSL/TLS certificate validity

Passed · Severity: OK · 8/8

The certificate was accepted by a validating TLS client at scan time.

Live TLS handshake succeeded. Latest issuance in CT logs: DigiCert, expiring 2027-03-17 (122 days). CT shows issued certificates, not necessarily the one served — confirm dates with the verify command.

Source data: Certificate Transparency logs (certspotter) for ubs.com
Live TLS handshake: certificate accepted
CT logs (context only, not scored):
Issuer: DigiCert
Valid from: 2026-08-31
Valid until: 2027-03-17
Names: credit-suisse.com, lsam.com, lsam.ibb.ubs.com, ptr.ubs.com, quotes.ubs.com, ubs.ch
Based on Certificate Transparency logs; may not reflect the certificate currently served.
$ echo | openssl s_client -connect ubs.com:443 -servername ubs.com 2>/dev/null | openssl x509 -noout -issuer -dates
Documentation: Certificate Transparency (https://certificate.transparency.dev/) · Let's Encrypt — Docs (https://letsencrypt.org/docs/) · Mozilla — Server Side TLS (https://wiki.mozilla.org/Security/Server_Side_TLS)

HSTS — enforce encryption in the browser

Passed · Severity: OK · 8/8

Browsers are told to always use an encrypted connection to the site.

max-age=63072000 (730 days), includeSubDomains, preload. ≥ 180 days recommended.

Source data: Response headers from https://www.ubs.com/
Strict-Transport-Security: max-age=63072000 ; includeSubDomains ; preload
$ curl -sIL https://ubs.com/ | grep -i "Strict-Transport-Security"
Documentation: MDN — Strict-Transport-Security (https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-Security) · RFC 6797 — HSTS (https://www.rfc-editor.org/rfc/rfc6797) · OWASP — HTTP Headers Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html)

CSP — protection from script injection

Needs attention · Severity: Low · Hardening gap · 5/8

A script policy exists, but it's permissive and offers only partial protection.

script-src includes: no script-src/default-src — weakens XSS protection.

Source data: Response headers from https://www.ubs.com/
Content-Security-Policy: frame-ancestors 'self'; object-src 'none'; base-uri 'self';
$ curl -sIL https://ubs.com/ | grep -i "Content-Security-Policy"
Fix recommendation (effort: Complex)
  1. First publish Content-Security-Policy-Report-Only — it blocks nothing, it only reports.
  2. Collect violations for a week or two and tune the policy to your legitimate sources.
  3. Switch to the Content-Security-Policy header and replace 'unsafe-inline' with a nonce or hash.
/*
  Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'

Safety: This change is made in your server/CDN settings. Test on staging before production. An overly strict CSP will break scripts — that's why you start in Report-Only mode.

Documentation: MDN — Content Security Policy (https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP) · OWASP — CSP Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html)

Clickjacking protection

Passed · Severity: OK · 5/5

The site can't be embedded by foreign sites.

frame-ancestors 'self'

Source data: Response headers from https://www.ubs.com/
X-Frame-Options: (missing)
CSP frame-ancestors: 'self'
$ curl -sIL https://ubs.com/ | grep -i "X-Frame-Options"
Documentation: MDN — X-Frame-Options (https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options) · OWASP — Clickjacking Defense (https://cheatsheetseries.owasp.org/cheatsheets/Clickjacking_Defense_Cheat_Sheet.html)

X-Content-Type-Options

Failed · Severity: Low · Hardening gap · 0/4

The browser may interpret files as code unintentionally.

Missing X-Content-Type-Options: nosniff header (MIME sniffing).

Source data: Response headers from https://www.ubs.com/
X-Content-Type-Options: (missing)
$ curl -sIL https://ubs.com/ | grep -i "X-Content-Type-Options"
Fix recommendation (effort: Easy)
  1. Add X-Content-Type-Options: nosniff to every response.
/*
  X-Content-Type-Options: nosniff

Safety: This change is made in your server/CDN settings. Test on staging before production.

Documentation: MDN — X-Content-Type-Options (https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Content-Type-Options) · OWASP — HTTP Headers Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html)

Referrer-Policy

Failed · Severity: Low · Hardening gap · 0/3

Internal URLs (including parameters) may leak to external sites.

Referrer-Policy is missing; the browser will use its default.

Source data: Response headers from https://www.ubs.com/
Referrer-Policy: (missing)
$ curl -sIL https://ubs.com/ | grep -i "Referrer-Policy"
Fix recommendation (effort: Easy)
  1. Set Referrer-Policy: strict-origin-when-cross-origin.
/*
  Referrer-Policy: strict-origin-when-cross-origin

Safety: This change is made in your server/CDN settings. Test on staging before production.

Documentation: MDN — Referrer-Policy (https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Referrer-Policy) · OWASP — HTTP Headers Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html)

Permissions-Policy

Needs attention · Severity: Low · Hardening gap · 0/2

Access to sensitive features like the camera and location isn't restricted.

Missing Permissions-Policy header.

Source data: Response headers from https://www.ubs.com/
Permissions-Policy: (missing)
$ curl -sIL https://ubs.com/ | grep -i "Permissions-Policy"
Fix recommendation (effort: Easy)
  1. Disable browser features the site doesn't need (camera, microphone, geolocation).
/*
  Permissions-Policy: camera=(), microphone=(), geolocation=()

Safety: This change is made in your server/CDN settings. Test on staging before production. Don't disable a feature the site actually uses.

Documentation: MDN — Permissions-Policy (https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Permissions-Policy) · OWASP — HTTP Headers Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html)

Software version disclosure

Passed · Severity: OK · unscored

The server doesn't disclose software versions.

No version numbers found in the Server / X-Powered-By headers.

Source data: Response headers from https://www.ubs.com/
server: cloudflare
x-powered-by: (missing)
$ curl -sIL https://ubs.com/ | grep -iE "^(server|x-powered-by)"
Documentation: OWASP — HTTP Headers Cheat Sheet (https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html)

DNSSEC — signed DNS records

Passed · Severity: OK · 7/7

The domain's records are digitally signed and hard to forge.

An AD (Authenticated Data) flag was returned by a validating resolver.

Source data: DNS-over-HTTPS (Cloudflare / Google): AD flag and DS record at the parent
AD = true
$ dig +dnssec ubs.com | grep -E "flags:.* ad"
Documentation: RFC 4033 — DNSSEC (https://www.rfc-editor.org/rfc/rfc4033) · ICANN — DNSSEC: what and why (https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en)

CAA — who may issue certificates

Needs attention · Severity: Low · Hardening gap · 0/5

Any certificate authority can issue a certificate for the domain, raising the risk of mis-issuance.

No CAA records found. RFC 8659 lets the domain owner restrict which CAs are authorized.

Source data: DNS CAA ubs.com
(no CAA records found)
$ dig +short CAA ubs.com
Fix recommendation (effort: Easy)
  1. Identify which certificate authority issued your current certificate (see the certificate check).
  2. Publish CAA for that authority only, and add iodef to receive alerts.
ubs.com.  CAA  0 issue "letsencrypt.org"
ubs.com.  CAA  0 iodef "mailto:security@ubs.com"

Safety: DNS changes are made only at your DNS provider. This tool only reads public data and changes nothing on the domain. If your CDN issues certificates on your behalf, include it too — otherwise certificate renewal will fail.

Documentation: RFC 8659 — CAA (https://www.rfc-editor.org/rfc/rfc8659)

DNS server redundancy

Passed · Severity: OK · 3/3

The domain is served by several DNS servers, so one server failing won't take it down.

12 NS servers.

Source data: DNS NS ubs.com
a1-12.akam.net
a2-65.akam.net
a3-64.akam.net
a5-65.akam.net
udns1.ultradns.net
udns2.ultradns.net
a26-66.akam.net
a28-65.akam.net
uranus.ubs.com
jupiter.ubs.com
mercury.ubs.com
neptune.ubs.com
$ dig +short NS ubs.com
Documentation: RFC 2182 — Secondary DNS server operation (https://www.rfc-editor.org/rfc/rfc2182)

Indicative alignment

Best-practice mapping of public findings to common frameworks. Passive scanning tests public configuration only; it doesn't prove compliance or a violation.

  • Google & Yahoo sender rules1 unverified
  • PCI DSS v4.01 observed gaps
  • NIS2 / vendor due diligence1 observed gaps
  • SOC 2 / ISO 27001 baseline2 observed gaps

Indicative alignment only, based on public configuration. It doesn't establish whether a framework applies to you, and it isn't legal advice, an audit or a certification.

Public DNS records

Aubs.com193.134.111.71
AAAAubs.com—
MXubs.com100 mx11.ubs.open.ch | 100 mx12.ubs.open.ch | 100 mx13.ubs.open.ch | 100 mx14.ubs.open.ch
NSubs.coma1-12.akam.net | a2-65.akam.net | a3-64.akam.net | a5-65.akam.net | udns1.ultradns.net | udns2.ultradns.net | a26-66.akam.net | a28-65.akam.net | uranus.ubs.com | jupiter.ubs.com | mercury.ubs.com | neptune.ubs.com
TXTubs.combgetadu5ym | MS=ms39873197 | KJ6H1XVY7hajkfSHWNfY | hm8OdoKtlO0o9QBG37aA | 4s5khz9036k867ll945q6kn6y5mkyv47 | _7y4r94tnt2yvt229aszxwomvxy2xuwz | _9b44sft43tfmhk3hfglurc2ovdes48c | _cr1vxump9grchtbnot2hr0rnf5z16pq | _dhirnkgx3akw6cgmk42u7my5dflhor8 | _ejl2jxvu80ksmugpul1awovttdawo1v | _o30vuuxu8k0ikfi2batyro2j67bp63z | _oiiqvab07x3sxufy1qt7ss2yhmv1ztd | _ppu0eid2nwzsj6krwidig2yb6kvtn30 | _svkigecu0s6dfysf5ctuae0f7s0wo2t | _z8c2knthhny20oyyevr9fw3l3x46ilr | ggnr7mcv6lwxbqwbdx7lzyz8r8ct6xsc | t7l899pcs8yyv6w31p484lxsx6n1jrsm | zh7vqpnnn0lk5vz4f552sbqzcnhf157g | d365mktkey=1nbagcoe2so0gaumloq5fc7ym | d365mktkey=51n7sg4jkwasf48ci0vye278m | d365mktkey=5dvvu50hqe6dj7brkmo6phu0z | apple-domain-verification=G0H6q4lqT0KlyN0k | apple-domain-verification=KfJm39EFEOCNsyaq | apple-domain-verification=bFt7GE7CPiRSbwO5 | apple-domain-verification=lpbETz8oB0ofIS3W | MS=4B73E19AEA57ADD637F5852C6AFB8949935007C1 | swisssign-check=B4UFJMIk7VMZLE8eoIF8gzGicxg | swisssign-check=EbaF8fBolkOjlJhenGQW7uSI5kU | swisssign-check=Pdib3kgU87oItvYNoFGjUFtn3_E | swisssign-check=QhDFVSYDlTmOHpRBujO1AFpkJTg | docusign=7e14a69a-30ab-4f23-8c70-fe6e80cdeb1a | docusign=f439e402-869c-43db-ae5c-926cf911137c | d365mktkey=2GM9K04tUiQNuAh02amC39DMVtn8OCSczsgSGL0xxxwx | d365mktkey=79nXgxHd4ex5R8ZxExLoBdPpQyx4KxV3ZCIX2LsVoiYx | d365mktkey=CmMOkvDwh5OHYEli1xAY7a4rJibvGDx4imbxJ3iHqwUx | d365mktkey=DEzVUrdyKZYkKawXrsNwamTJ3drEQ0ZA0u5XqxPDoKEx | d365mktkey=FFfrlyBhMz22dWAfJJ5qvK5DYRA9RMKtFM0qk2Un2pQx | d365mktkey=GMY7FXWULQdeHrDvba3wvhl90HkZGOjoATOJ8d4LIxsx | d365mktkey=Jiwkuis7G9poBrM36fsITT8eTqA2dJQcUNa2zYwmb90x | d365mktkey=KF0HvyxHf2DfKYqPZIOSaFWkXLXfiMK8wb4UxQ7en4Ax | d365mktkey=L28GThTU5WUc1xtV0ED5mKgV8yTlEX1vVo24RH0u9X8x | d365mktkey=LetA1xy04n0fmExsfK9fDxozFpL9cGdt57k3cHIdzWAx | d365mktkey=Nuu8su9Pr6w3BYnl0P7Ugm16xNoDoxyTOWwUUoZvrCox | d365mktkey=OUhdK8xNPcoDbxPntlYN9g7srAy7q0CWOTrjEHHnUYcx | d365mktkey=Q1FyejrpjHQ4HAzTZSBeQH9wWKDi8xlDFWbvsTbFU8cx | d365mktkey=TV5XrHpTF98oytu0FuUNQVXaxeu6xPpa9ET4J1lZfUYx | d365mktkey=TkkNUSPWuMxBXkgAlOAnuuhdelQfTSu8xo8x6kZwFn8x | d365mktkey=U5JeBmZkguv0RkQ8X1IZyFKA7Kn2z6vKFGJtXBl3n6sx | d365mktkey=UHfHA4egmaRAz6cgY3xYriHaxq7qLS6CrQnwve3xIccx | d365mktkey=VOL6xGDn4qSNPZ2KiY4EVaIjIkGuWClCPW7gp0YHdlkx | d365mktkey=X43ITGFwNAK4Plz3uKldLSnzxwmCF3KCSwMzSG5CZnUx | d365mktkey=XW9bxyxx939QQxnXL4t0KatbcXvvTr7CLF9CKf5eXuMx | d365mktkey=Y03e8q2sgB9DZ5OudrrBZ4MyxZXxxP7a6c1l1x4V9TEx | d365mktkey=a1x0sXFxyx0qH5YsLVEGx4N6lDInF7pgnyT58Uxol3Ux | d365mktkey=bLEn4u896GLeswCkavXU5yt3rv11qRINO8fvIKbV7ywx | d365mktkey=d0JJYE7K8DimIvYp4GoZE6ofYt7yhgaiArbPFuloODox | d365mktkey=dh0Jjhs66Cxxzexy8sjjqdq0zNVR0pCuOyX5z8ZNX8Ex | d365mktkey=eUR8Sphg9PzBUAsfKlrA9Hgi57EpGZd3440txQeqBx0x | d365mktkey=ereKo1ne4QVmPyxMEzdBEXYszavbxwbxBh7nHKEu6n8x | d365mktkey=h6LeciNo6mMGYWuMaR2eIaTWugNiCkxE9vMvJyXWQmYx | d365mktkey=j61up3kMr8XtI1Bu26D748dxxB8qWgZxRjI9hEtFH0Ix | d365mktkey=kFsiQTjJMaZil6FZXnQGBEaxrQV3gw70B0Zn5dvVKvQx | d365mktkey=l1FxoETCrIpRkXj97qiYpayK6vOfgu4ID6HL2SIHEVwx | d365mktkey=m4yTSRiS5WHxu3aqSJkF81jnzFtgsdNoaM7iLQgxniUx | d365mktkey=oFAmYcLgwxsdDnGfO6lj8aMZKTfuAamvxZH0PrVgcIAx | d365mktkey=r2n03Eix9VkuDKdhoxdggGshPsrsxHcNDSGqiYKAMYox | d365mktkey=refYPl3efr1u9ixyXufekmgixevhV3syH7XgS9xXQoox | d365mktkey=rw4jd99xixPAVSiIy0HA5nBRfd8Yxx585aIewxIEEOYx | d365mktkey=sEJxwFggKtlCIvdaX59KH6hU04LRAfYXfPpSrzkBDUwx | d365mktkey=smYqzJoxM1ruFG4WLGBbvpbYwwzkHcJHaxjxTLajPnIx | d365mktkey=woKXiWoTFHufqJexPJUZj6UXiM5CCo2QaxR4sxBxGL0x | d365mktkey=xIhOleA0LA64SpfpHbufoxK0YpTGCLnaA2nev0xok6kx | d365mktkey=xaaM03TgpcbqE175Dskd0l9SxQi3Tbnf1ZSZQfkgAbwx | d365mktkey=xbhYh5ibB01yPQenmOZXHRR9ipzQOlo5o9n0vxxqTp4x | webexdomainverification.=f290b4d9-66a6-46f6-9532-6340ee994863 | webexdomainverification.147ZK=3e7e5ea0-4441-4624-9128-ae6820975a95 | webexdomainverification.1QTP6=8463d7a7-8199-44b8-a831-312200bc472a | yahoo-verification-key=wH8imQymrkXHp9lMwyqB7PnLMaYv+0JY5LrRyPhUUIk= | google-site-verification=zN6-GwLduc1WT1yGiPjN0b2hwQtKOZNgCi0BsWDUWfM | JFMyORm9A//mNl8pTP5RWMtcrytoWNxREGsaZliHfVrPNI/Naj7KnImcv/ZkmBoRHIh2tRVx0sgJu6jZYrAeYg== | wiz-domain-verification=0471fe866ba173beeeb001660156c20a2ec9d31d69df6c560412041c3d98a7b4 | wiz-domain-verification=07709d2a7782474c654c9ea667d5fe776e0c6ad44ff059ba1cea5941149e5127 | adobe-idp-site-verification=f632d15f46dbcc29ce5dc20b9e58097de7577ff8760bf3656e56f82b53b34484 | cisco-ci-domain-verification=7c2336d99fee585a0e55327309a769eb2936a4f80d3b16177fbf10ceadad03c | cisco-ci-domain-verification=f6e192bcb2186b667b594e6ebb7ae7e568b8b2e2332e03173ed0b8c9225ef1c | v=spf1 include:spf-a.ubs.com include:spf-b.ubs.com include:spf-hosted.ubs.com include:spf.protection.outlook.com include:_spf.credit-suisse.com -all
TXT_dmarc.ubs.comv=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-reports-57574806756964364169@open.ch,mailto:dmarc-reports@ubs.com; ruf=mailto:dmarc-forensics@ubs.com; rf=iodef; pct=100; ri=86400
CAAubs.com—
DSubs.com29962 8 2 edee4831cd08fd79ff08222dcf63739f5885124c1159051a2ead60453af4af63
Passive check only: reading public DNS records, Certificate Transparency logs and ordinary GET requests to the homepage over HTTPS and HTTP. No changes were made to the scanned domain. Results are an indication and do not replace a professional security assessment.

Check your own domain