salz.ch

.ch crawl

First seen 2026-05-26 · Last seen 2026-05-31 · ok HTTP/1.1 200 4765 ms crawled 2026-05-30

NL · 89.106.200.1 · AS209626 Enflow B.V.

Reputation 84/100 permissive spf dmarc monitor-only

Classifying

HTML metadata

Title

From Switzerland, for Switzerland: our salt | Schweizer Salinen

Language

Canonical

www.salz.ch/en/home

Translations

Technology

CDN: Azure Front Door
CMS: Drupal
JS framework: Nuxt

Cookie consent

Usercentrics

Third-party hosts loaded (2)

privacy-proxy.usercentrics.eu×3
app.usercentrics.eu×2

Social

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

MX

10 mx1.mail.hostpoint.ch
10 mx2.mail.hostpoint.ch

TXT

mx-9160fa46a5bd984d

Verified for

Google

Email authentication weak

SPF: v=spf1 include:spf.mailjet.com redirect=spf.mail.hostpoint.ch +all
permissive (+all) — anyone can send as this domain
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-05-16 to 2026-08-14

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.salz.ch/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.vimeo.com *.gstatic.com recaptcha.net *.googleapis.com *.meteotest.ch *.facebook.com *.facebook.net *.usercentrics.eu *.googletagmanager.com *.adnxs.com *.google-analytics.com; style-src 'self' 'report-sample' 'unsafe-inline' fonts.googleapis.com *.meteotest.ch; img-src * data: ; media-src 'self' data: https://contenthub.salz.ch; connect-src 'self' *.opendatasoft.com *.meteotest.ch *.facebook.net *.facebook.com *.salz.ch salz.ch *.jsdelivr.net *.google-analytics.com *.usercentrics.eu; frame-src * data: blob: 'unsafe-inline'; frame-ancestors 'none'; child-src 'none'; font-src 'self' data: *.gstatic.com *.meteotest.ch;
strict-transport-security: max-age=2592000; includeSubDomains