benu.ch

HTML metadata

Title: BENU Apotheke | Ihre Online Apotheke der Schweiz
Description: BENU Apotheke Schweiz: Jetzt einfach & sicher online bestellen bei Ihrer Apotheke. Kaufen Sie hier Medikamente & Gesundheitsprodukte.
Language: de-CH
Canonical: https://www.benu.ch/

Technology

Server: nginx
CMS: Nuxt

Third-party hosts loaded (3)

media.health-and-life.ch×15
shop.toppreise.ch×1
track.bx-cloud.com×1

Social

Contact

Email

info@benu.ch

DNS records live

NS

ns11.infomaniak.ch
ns12.infomaniak.ch

MX

0 benu-ch.mail.protection.outlook.com

TXT

dr0l7xncmnw1qhjnsspvtlqv3qllwnsc
61yf5rx1sz3b1wkqj5z8m2j9q56nkg3c

Verified for

Apple
Atlassian
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf-de.emailsignatures365.com include:_spf.elasticemail.com include:spf.infomaniak.ch include:spf.senselan.ch ip4:212.80.96.0/21 ip6:2a01:7480:1:100::/64 ip4:194.148.102.180 mx:hin.ch ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:postmaster@benu.ch; adkim=s; aspf=r;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zz5++kDmnCuM34mPyVOra+fwq9Pacpryx/+mBBnSBLqMd+wlRdUz2RHLrnsBlFeH2uPAAxn5qngm0…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKoRramBCzafrcs8xWjY4tJX/7avVi7QITnDcpopytkJ1YvtwLChZlYZvgMsza27aP8vvGcwU/zFWn…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wM7a0hbJv3Uuy4DqTMdVV4zW8pDX/AzE9APT3nfNeaSvoOkETyMYB7hHXgg+9RSLPsKi80hCG4dkDSGTo…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-10-29 to 2026-11-30

Expires in 182 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.benu.ch/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; block-all-mixed-content; default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.amazonaws.com https://google-analytics.com https://googletagmanager.com https://m.youtube.com https://maps.googleapis.com https://maps.google.com https://ssl.google-analytics.com https://tagmanager.google.com https://www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com https://*.clarity.ms https://*.licdn.com https://*.doubleclick.net https://sst.benu.ch https://*.sst.benu.ch https://*.usercentrics.eu https://*.sentry-cdn.com https://*.sentry.io *.bx-cloud.com bx-cdn.com https://*.googleapis.com https://*.facebook.net https://*.adobe.io https://*.adobe.com https://*.adobedtm.com https://*.adobedtm.net https://*.adobedtm.eu https://*.adobedtm.de https://*.adobedtm.fr https://*.adobedtm.co.uk https://*.adobedtm.it https://*.adobedtm.nl https://*.adobedtm.se https://*.adobedtm.no https://*.adobedtm.dk https://*.adobedtm
strict-transport-security: max-age=31536000; includeSubDomains