halter.ch

.ch crawl

First seen 2026-05-22 · Last seen 2026-05-30 · ok HTTP/1.1 200 6796 ms crawled 2026-05-28

CH · 149.126.4.14 · AS47302 cyon AG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Design Build - Halter AG
Language: en

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

Phone

DNS records live

NS

ns1-01.azure-dns.com
ns2-01.azure-dns.net
ns3-01.azure-dns.org
ns4-01.azure-dns.info

MX

10 mx1.hc1250-59.eu.iphmx.com
10 mx2.hc1250-59.eu.iphmx.com

TXT

Show 8 TXT records

bw=y2jPHp7vw7B4eY0HRgC75uBHjCw8vZpv8uzZJGuUw4Gj
parallels-domain-verification=97b4c088b3cd483987082a814bbf33e64ff3b0dc6a5b47428078b2da1859587b
ed2rmkvpp40ct1b6o54arqfrq2
ho3trd2kd6haq70msa0405otic
saC36ng1VA58nfEFdzO8kp/WDSF25j0Q4xj9UilePdcOeDFUz9q4DJuuu9bLYrKe5wp6GMBngvzPE9XaNd/fMQ==
jeo1llva3qvsfoslu6gciodipq
ESE3RCT6YMVTK8TXJ58ZDV9J2EJ76HFF
autodesk-domain-verification=d3ogm3eD0ucPlU3k7SjJ

Verified for

Adobe
Anthropic
Apple
Atlassian
Brevo
Dynamics 365
Microsoft 365
Notion
OpenAI

Email authentication partial

SPF

v=spf1 mx include:spf.protection.outlook.com include:customers.clickdimensions.com include:_spf.prospective.ch include:mailing.eqs.com exists:%{i}.spf.hc1250-59.eu.iphmx.com include:spf.protection.cyon.net -all

strict (-all)

DMARC

v=DMARC1;p=none;pct=100;rua=mailto:93474eaa34@rua.easydmarc.eu;ruf=mailto:93474eaa34@ruf.easydmarc.eu;ri=86400;fo=1;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2/iG0AE9LHvy/3Ay7U5erDgJRCS0ePzwI8zz0JBidljZSPQig2bMutnMYSmG9/vuJlp8MSkrl97C7V6oWEhT…

selectors probed

Certificate (current)

R13

from 2026-04-15 to 2026-07-14

Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.halter.ch/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: microphone=(), usb=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline'; script-src-elem *.clarity.ms snap.licdn.com *.hsforms.net *.googletagmanager.com *.googleapis.com *.dynamics.com *.google-analytics.com 'unsafe-inline' 'self'; script-src-attr 'unsafe-hashes'; style-src-elem 'unsafe-inline' 'self'
strict-transport-security: max-age=31536000; includeSubDomains