inventx.ch

HTML metadata

Title

Home - Inventx

Language

de

Canonical

https://www.inventx.ch/

Feeds

Inventx » Feed RSS
Inventx » Kommentar-Feed RSS

Open Graph

url: https://www.inventx.ch/
title: Home - Inventx
locale: de_DE
site name: Inventx

Technology

CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (3)

cxppusa1formui01cdnsa01-endpoint.azureedge.net×2
px.ads.linkedin.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.ixcloud.ch
ns2.ixcloud.ch

MX

10 mx1.inventx.ch
20 mx2.inventx.ch
30 mx1.ixcloud.ch
40 mx2.ixcloud.ch

TXT

Show 4 TXT records

m+DOOn6uedR/39K8tLPw6bMS6TM4WzSUT0oGdC0w+GQuBuby2J9zKaNFodMRSL/vinIGOp+DH/xD6ZHG4YGhHw==
swisssign-check=wDSHgJ_wKgPK92GY1HgZOeIC-og
_2ixr6powpnumodgp2jxf4g7i487gl6p
_xkduew6lfqxxllcbrrtjqnqvxfkbql8

Verified for

Atlassian
Dynamics 365
Google
Microsoft 365
Miro

Email authentication weak

SPF

v=spf1 a mx ip4:185.178.60.8 ip4:185.178.60.9 include:servers.mcsv.net include:spf.protection.outlook.com include:spf.emailsignatures365.com ip4:93.189.64.0/22 -all

strict (-all)

DMARC

not published

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

R12

from 2026-05-18 to 2026-08-16

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.inventx.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(self), autoplay=(self), camera=(self), display-capture=(self), fullscreen=(*), geolocation=(*), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), sync-xhr=(*), usb=(), screen-wake-lock=(*), web-share=(self), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://code.jquery.com https://snap.licdn.com https://www.google-analytics.com https://www.gstatic.com https://cdnjs.cloudflare.com/ajax/libs/gsap/ https://inventx.jobbase.io https://prescreen.io https://cdn.jsdelivr.net/npm/promise-polyfill@8/ https://js.braintreegateway.com/web/ https://inventx.onlyfy.jobs https://*.dynamics.com https://*.azureedge.net ; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.icomoon.io https://www.gstatic.com https://hello.myfonts.net https://d1azc1qln24ryf.cloudfront.net/26008/inventxch/ https://inventx.jobbase.io https://inventx.onlyfy.jobs https://*.dynamics.com https://*.azureedge.net; frame-src 'self' https://*.youtube.com https://www.youtube-nocookie.com https://inventx.jobbase.io https://prescreen.io https://inventx.onlyfy.jobs https://*.dynamics.com https://*.azureedge.net; object-src 'none'; img-src 'self' data: https://*.w.org *.gra
strict-transport-security: max-age=63072000