bslenzburg.ch

HTML metadata

Title: Home
Generator: TYPO3 CMS
Canonical: https://www.bslenzburg.ch/home

Open Graph

title: Home

Technology

Server: nginx
jQuery: 3.6.1

Analytics

Google Tag Manager

Third-party hosts loaded (2)

ajax.googleapis.com×1
www.googletagmanager.com×1

Social

Contact

Phone

062 885 39 00

DNS records live

NS

ch.ch-inter.net
de.ch-inter.net
nl.ch-inter.net

MX

0 bslenzburg-ch.mail.protection.outlook.com

TXT

Show 5 TXT records

bw=xarWWoxRHSxnmanTmPoiCw0uPQaXOR8nhl9U2HaBpAHY
atlassian-sending-domain-verification=552b7681-b0d7-49fc-958e-ef38ffce06be
X0OxHbY7DhgFhDuJqLosjF4DjlrdstnNP75n7fizyl3wRTJrx3kiE4MUMONZa+JwDNCOLSI0LKEgC3PLVXh/PQ==
YXp1cmVfY29tbW9uX2V1
autodesk-domain-verification=TM1BkresAY-giuNoT1FJ

Verified for

Atlassian
Microsoft 365

Email authentication weak

SPF

v=spf1 mx ip4:84.253.29.29 ip4:83.150.37.167 include:spf.protection.outlook.com include:_spf.sui-inter.net -all

strict (-all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxlfKZcXAo7yxCvW3dt8T7RNGldQ/E/h9s1hw/9y17wBOsciNDgQUEzuweN7Z8v8yGPFhzxaX1gUzxD5kbVm…

selectors probed

Certificate (current)

R12

from 2026-04-20 to 2026-07-19

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.bslenzburg.ch/home

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.google.com https://ajax.googleapis.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://www.googletagmanager.com/ https://unpkg.com/ https://fonts.gstatic.com blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ; object-src 'self' blob:;base-uri 'self'; connect-src 'self' https://ajax.googleapis.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://stats.g.doubleclick.net/ https://djooze.bslenzburg.ch https://schulnetz.bslenzburg.ch https://maps.googleapis.com blob:; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://maps.google.ch/ https://schulnetz.bslenzburg.ch https://www.google.com; img-src 'self' https://www.google.ch/ https://www.googletagmanager.com https://maps.gstatic.com https://maps.google.com data:; manifest-src 'self'; media-src 'self'; worker-src 'none';
strict-transport-security: max-age=15768000; includeSubDomains