privera.ch

HTML metadata

Title: Privera - Home
Language: de

Open Graph

url: https://www.privera.ch/
title: Home

Technology

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (3)

app.usercentrics.eu×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

kontakt@privera.ch

DNS records live

NS

dns1.swisscom.com
dns2.swisscom.com
dns3.swisscom.com

MX

10 privera-ch.mail.protection.outlook.com

TXT

Show 6 TXT records

VzPqMsDevssDdWY0qDDgj/3zO+NJxIrHoYUI6N6dL+JUkmG+DbMg/ABFRchMpLLLVdprMszxcgU2bLlllviqfA==
swisssign-check=tCal72J1zoPEj3myBgI7JpNQB3k
f5pdchcdve9di32j87qjcb1muc
swisssign-check=dZaW-p5XovmDMjBzutgBiV-Mt0A
swisssign-check=QIvjjq8NORL9r0sw8INvZf7I6ddpjMjlnf9ipSpugz
swisssign-check=xJbIFo0bKyg_qybb80nptq8sxa0

Verified for

Apple
Atlassian
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:spf.swisscom.com include:spf.appmail.swisscom.com include:sendgrid.net include:servers.mcsv.net include:spf.emailsignatures365.com ip4:46.231.207.186 ip4:212.80.96.0/21 ip6:2a01:7480:1:100::/64 include:_spf.rexx-suite.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc-reports@privera.ch

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOoDi0vPO9fT5ZDO+zUIrPNJYleJ4teifrg4ri0yrqvD81loqfoSeAdKdBMyHaIqAa2Onn6MRjMp3VyMDt…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+w/LrlXq1ISb2qgrL7+TqZBUYeQ/tbxbA3vmU7XYtBWJxRI1VL5M/uUGWcnSn542uYmwpCG/+kXQ/IDz0XdiIdu…

selectors probed

Certificate (current)

R13

from 2026-05-09 to 2026-08-07

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.privera.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.hci-is24.ch https://www.gstatic.com https://flatfox.ch https://*.usercentrics.eu https://unpkg.com/smg-layout-solution-loader@1.0.12/; font-src 'self' https://fonts.gstatic.com https://fast.fonts.net https://fonts.googleapis.com; connect-src 'self' https://sentry.intersim.ch https://*.usercentrics.eu https://*.google-analytics.com https://stats.g.doubleclick.net; object-src 'self'; style-src 'unsafe-inline' 'self' https://fast.fonts.net https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com https://chart.googleapis.com https://stats.g.doubleclick.net https://api.qrserver.com https://*.usercentrics.eu; manifest-src 'self'; frame-src 'self' https://www.youtube.com https://www.googletagmanager.com https://*.hci-is24.ch https://www.google.com https://spectando.com/ https://flatfox.ch https://jobs.
strict-transport-security: max-age=31536000; includeSubDomains, max-age=31536000; includeSubDomains