scienceindustries.ch

.ch crawl

First seen 2026-05-18 · Last seen 2026-05-31 · ok HTTP/1.1 200 17198 ms crawled 2026-05-22

CH · 77.244.52.222 · AS24951 EveryWare AG

Reputation 94/100 dmarc monitor-only

sector other type homepage

HTML metadata

Title: scienceindustries - Home
Language: en

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Social widgets

Vimeo Embed

Third-party hosts loaded (4)

privacy-proxy.usercentrics.eu×3
player.vimeo.com×2
app.usercentrics.eu×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.isource.ch
ns2.isource.ch

MX

0 scienceindustries-ch.mail.protection.outlook.com

TXT

Show 4 TXT records

_k6bfl61znqz0un3awutgyo892aiiziu
rll4mmd879p8ftt8ncnb2tdcbp17p4gn
mtpb6lg7mxp4y7t8t4s140mvdwgm1w4y
mandrill_verify.7IGcmaprpHNIi1wPGXevhQ

Verified for

1Password
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:ssp-online.ch mx a:mail01.ssp-online.ch -all

strict (-all)

DMARC

v=DMARC1;p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfAJ5IyZ4LBLEV8mJmDcr7TJa91Li4sdZuq0AgmNsMEi7jVbCtC1Fsk4H1HLzqb0q0/p7WEfcwPl6eclwOTE…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/NpQjb0wf0rRPBjX65nqGB39lnM4h1cC7RhfCHTGKHhHRvUneN2/T3eG1AkGXAAuVqQGQLtNQBGkbu7hZzz…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.scienceindustries.ch

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.google-analytics.com https://*.vimeo.com https://*.twitter.com https://sentry.io https://*.ingest.sentry.io https://cdn.syndication.twimg.com https://*.hotjar.com https://cdn.skypack.dev https://*.usercentrics.eu https://*.googletagmanager.com; font-src 'self' https://fast.fonts.net https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self' https://sentry.io https://*.ingest.sentry.io https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://*.usercentrics.eu https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.
strict-transport-security: max-age=31536000; includeSubDomains