indexo.dev

bichsel.ch

.ch crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 607 ms crawled 2026-05-30

CH · 194.209.6.50 · AS208813 Galexis AG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Startseite - bichsel.ch
Language
en
Canonical
https://www.bichsel.ch/en/
Translations
  • de
  • fr

Open Graph

title
Startseite

Technology

Server
nginx

Third-party hosts loaded (2)

  • static.e-galexis.com×8
  • statistics.e-galexis.com×2

Contact

Phone

DNS records live

NS
  • a.portsdns.se
  • b.portsdns.net
MX
  • 10 bichsel-ch.mail.protection.outlook.com
TXT
Show 8 TXT records
  • y8g32549lyzbqbymrxs8wfryv38zgvrd
  • swisssign-check=qqfbEwtL0sYt7Z22avZAJExjGls
  • swisssign-check=merZ7pLKCVVz5PwghunrypPdjGE
  • swisssign-check=m_vjfIuq_CxJ7A2-JtY2n1iKDPU
  • knowbe4-site-verification=6aea5f5ceb8dea7e51f4d4fb401d7786
  • _5ns077mx259uy0l8w7n40xopi2kirmc
  • QuoVadis=364df6ce-5f1a-452a-8eba-ca6d75fead59
  • 1v9w6239mc2gk2r1ysg82ck63yfqwsgj
Verified for
  • Atlassian
  • Figma
  • Microsoft 365

Email authentication partial

SPF
v=spf1 include:_spf.galenica.com include:spf.protection.outlook.com include:spf.iway.ch mx:hin.ch -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc.reports@galenica.com; ruf=mailto:dmarc.failure@galenica.com; fo=1;
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Q72h/jXKwHDmvC2hqqGwkY+Ay1VnhCPqhVq74Bs+mQ1Ad91fBoC7UOjtzsIMV7Hfs4pvQlxi9TQU…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6vAx6+0QALndGAPZBbaBik5bki3w5jHz2bL2qnx7Ja8XuP7kB5rrb7Oc/n1PtnFyzY/nuRs+fRkXz…
selectors probed

Certificate (current)

R13
from 2026-04-08 to 2026-07-07
Expires in 36 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bichsel.ch/en/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.e-alloga.ch *.e-galexis.com *.e-ufd.swiss *.galenica.com *.googleapis.com *.gstatic.com *.onedoc.ch *.solique.ch *.vimeo.com *.weblication.de *.youtube.com *.ytimg.com ir.tools.investis.com onedoc.ch vimeo.com weblics.de youtu.be; frame-ancestors 'self' *.e-alloga.ch *.e-galexis.com *.e-ufd.swiss *.onedoc.ch onedoc.ch; report-uri https://cms1.app.e-galexis.com/csp-report.php;
strict-transport-security
max-age=31536000

Links to (3)

Linked from (2)