bank-now.ch
HTML metadata
Technology
- Server
- Apache
- jQuery
- 3.7.1
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (3)
- app.usercentrics.eu×1
- privacy-proxy.usercentrics.eu×1
- www.credit-now.ch×1
Social
DNS records live
- NS
-
- ns1.ip-plus.net
- ns2.ip-plus.net
- MX
-
- 20 mail1.bank-now.ch
- 20 mail2.bank-now.ch
- TXT
-
swisssign-check=ux-mYlf5H80pfM3i7FvTNO4spQ0
- Verified for
-
- DocuSign
- Meta
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 mx include:spf.protection.outlook.com a:mail3.bank-now.ch ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
SwissSign RSA TLS EV ICA 2022 - 1
Expires in 143 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self), xr-spatial-tracking=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.analytics.bank-now.ch https://*.analytics.credit-now.ch https://*.analytics.lease-now.ch https://analytics.bank-now.ch https://analytics.credit-now.ch https://analytics.lease-now.ch https://analytics-eu.clickdimensions.com https://cdn.adtelligence.de https://testcdn.adtelligence.de https://banknow-service.adtelligence.de https://banknow-tracking.adtelligence.de https://ajax.googleapis.com https://ad.doubleclick.net https://chat.bank-now.ch https://chat.credit-now.ch https://chat.lease-now.ch https://googleads.g.doubleclick.net https://maps.googleapis.com https://www.googleadservices.com https://tagmanager.google.com https://www.googletagmanager.com https://*.google-analytics.com https://www.youtube.com/ https://s.ytimg.com https://connect.facebook.net https://www.jsctool.com https://*.usercentrics.eu; style-src 'self' 'unsafe-inline' https://chat.bank-now.ch https://chat.credit-now.ch https://chat.lease-now.c- strict-transport-security
max-age=16070400; includeSubDomains
Links to (6)
- mozilla.org×1
- microsoft.com×1
- instagram.com×1
- google.com×1
- facebook.com×1
- apple.com×1