bkw-rail.ch
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (2)
- app.usercentrics.eu×1
- www.googletagmanager.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns1.bkw.ch
- ns2.bkw.ch
- TXT
-
_7sm4lmw4o20tfnlhl3e6ppxfykg21ot_tjol3psw5y1l6d2j936vdz5il5pkzwj
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 184 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- content-security-policy-report-only
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
geolocation=(self)- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'- strict-transport-security
max-age=31536000; includeSubDomains- content-security-policy-report-only
default-src *; script-src 'self' 'unsafe-eval' *.bkw.ch *.cookiebot.com 'report-sample'; img-src 'self' data: blob: *.linkedin.com *.usercentrics.eu 6016554.global.siteimproveanalytics.io pms.imgix.net www.google.ch www.google.com *.bkw.ch *.bkw.com; base-uri 'self'; frame-src 'self' login.portal-services.ch *.adform.net *.doubleclick.net *.usercentrics.eu *.bkw.com; style-src-elem 'self' 'unsafe-inline' *.bkw.ch *.gstatic.com 'report-sample'; script-src-elem 'self' 'unsafe-inline' blob: login.portal-services.ch *.adform.net *.clarity.ms *.doubleclick.net *.usercentrics.eu *.bkw.ch 'report-sample'; script-src-attr 'self' 'unsafe-inline' 'report-sample'; style-src 'self' 'unsafe-inline' *.bkw.ch *.cookiebot.com 'report-sample'; font-src 'self' data: *.bkw.ch *.gstatic.com; frame-ancestors 'self' *.bkw.ch; media-src 'self' data:; worker-src 'self' blob:; report-uri https://sentry.bkw.ch/api/5/security/?sentry_key=17d36f4cce6ab33fecda30bd4ceaed85