bhclgroup.com

HTML metadata

Title: BioHorizons Camlog Group
Language: en
Generator: TYPO3 CMS
Canonical: https://www.bhclgroup.com/en/

Technology

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (6)

cdnjs.cloudflare.com×22
cdn.jsdelivr.net×2
maps.googleapis.com×2
app.usercentrics.eu×1
privacy-proxy.usercentrics.eu×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

+80002800000

Address

Grosspeteranlage 29, 4052, Basel, Switzerland

Registration

Registrar

InterNetX GmbH

Created

2025-02-03

Expires

2027-02-03 247 days left

Updated

2026-05-07

Name servers

ns.network-engineering-gmbh.net
ns1.nwe.de
ns2.nwe.de

DNS records live

NS

ns.network-engineering-gmbh.net
ns1.nwe.de
ns2.nwe.de

MX

10 bhclgroup-com.mail.protection.outlook.com

Verified for

GlobalSign
Microsoft 365

Email authentication weak

SPF: v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GlobalSign GCC R6 AlphaSSL CA 2025

from 2026-05-11 to 2026-11-26

Expires in 178 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.bhclgroup.com/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: child-src 'self' blob: *.google.com *.altatec.de *.youtube-nocookie.com *.youtube.com *.googletagmanager.com *.usercentrics.eu *.camlog.de *.clickdimensions.com *.cidaas.de camwebstorage.blob.core.windows.net; media-src 'self' camwebstorage.blob.core.windows.net blob:;, default-src 'self'; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.licdn.com *.linkedin.com *.gstatic.com *.google-analytics.com *.googleapis.com s.ytimg.com *.youtube.com *.jsdelivr.net *.facebook.net *.usercentrics.eu *.googletagmanager.com *.clickdimensions.com *.cloudflare.com *.google.com; img-src 'self' data: blob: *.linkedin.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.de *.facebook.com *.usercentrics.eu *.youtube.com *.gstatic.com *.googleapis.com *.ytimg.com *.camlog.de; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.cloudflare.com; font-src 'self' data: *.googleapis.com *.gstatic.com; connect-src 'self' *.lin
strict-transport-security: max-age=63072000; includeSubDomains; preload