helsana.ch
HTML metadata
Technology
- Analytics
-
- Google Analytics
- Google Tag Manager
- Ads
-
- Google Ads (DoubleClick)
- Meta Pixel
Third-party hosts loaded (12)
- ad.doubleclick.net×1
- adservice.google.com×1
- analytics.twitter.com×1
- bat.bing.com×1
- connect.facebook.net×1
- googleads.g.doubleclick.net×1
- rum.hlx.page×1
- snap.licdn.com×1
- static.ads-twitter.com×1
- stats.g.doubleclick.net×1
- www.google-analytics.com×1
- www.googletagmanager.com×1
DNS records live
- NS
-
- ns1.helsana.ch
- ns2.helsana.ch
- ns3.helsana.com
- MX
-
- 10 mailhost1.helsana.ch
- 20 mailhost2.helsana.ch
- TXT
-
Show 5 TXT records
infoblox-domain-mastery=e5731e68c199c0312fd45934adca020e9bed8e38553cd1dcf8b292e66094092a97Validity-Domain-Verification=dHK6KGLrWVfSZyrF0k4S+h1iRFA=s0txgvhlq7lbp12wcgqs62wqrdwtmxcv3ecf7e03-4aa3-43cb-bd50-20554cc63b2bswisssign-check=3ZHZcKqzkXRozQ9hqJzEPvOCtpI
- Verified for
-
- DocuSign
- Dynamics 365
- Miro
- MongoDB
Email authentication partial
- SPF
-
v=spf1 mx ip4:164.128.36.32 ip4:193.73.106.128/28 ip4:193.223.193.128/28 ip4:193.223.193.23 ip4:193.73.106.23 include:spf.helsana.ch include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1;p=none;rua=mailto:dmarc_agg@vali.emailpolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC6XYWAxXt9tL76yt+LvywowZsJQNoh1/F2vbmwdCBC3Fpvr7zw7/F31m+0u7IqoGE/V0+MbY2uEWFUbrj+e… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCumlha1FMmI1ukyorENDtQN/zcIIqe8sU911xjwh21fx6msLzv8xu6JX8fh/rpTMbNRpv5HvSsVPZ4kGgRuC…
selectors probed - selector1:
Certificate (current)
SwissSign RSA TLS EV ICA 2022 - 1
Expires in 50 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- findings
-
- missing Content Security Policy
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- strict-transport-security
max-age=31536000; includeSubDomains- content-security-policy-report-only
style-src 'self' 'unsafe-inline' *.helsana.ch fonts.googleapis.com translate.googleapis.com;style-src-elem 'self' 'unsafe-inline' *.helsana.ch fonts.googleapis.com translate.googleapis.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net interaktiv.contilla.de use.fontawesome.com;img-src 'self' data: *.helsana.ch *.pinterest.com s0.2mdn.net bat.bing.com www.facebook.com connect.facebook.net cm.everesttech.net dpm.demdex.net apple-resources.s3.amazonaws.com *.applemediaservices.com *.googlesyndication.com *.gstatic.com maps.googleapis.com www.googleadservices.com www.googletagmanager.com www.google-analytics.com *.doubleclick.net t.co *.linkedin.com *.google.com *.google.ch *.google.de *.google.fr *.google.li *.google.it *.google.ad *.google.ae *.google.al *.google.at *.google.ba *.google.be *.google.bf *.google.bg *.google.bj *.google.ca *.google.cd *.google.cg *.google.ci *.google.cl *.google.cm *.google.cn *.google.cz *.google.dk *.google.dz *.google.ee