shkb.ch

HTML metadata

Title: Schaffhauser Kantonalbank – Ihre Bank in der Region Schaffhausen
Description: SHKB – Ihre Kantonalbank in Schaffhausen: Konto, Hypothek, Vorsorge, E-Banking, Finanzierung, Freizügigkeit, Anlegen, Kurs, Säule 3a, Immobilien, …
Language: de
Canonical: https://backend.shkb.ch/

Technology

Server: Apache
CMS: Nuxt
JS framework: Nuxt

Cookie consent

OneTrust

Third-party hosts loaded (2)

cdn.cookielaw.org×2
chat.aiaibot.com×1

Social

Contact

Phone

+41-52-635-22-22

Address

Vorstadt 538201 Schaffhausen+41 52 635 22 22info@shkb.ch

DNS records live

NS

ns1.shkb.ch
ns2.cablecom.net
ns2.shkb.ch

MX

10 mx01.shkb.ch
20 mx02.shkb.ch

TXT

Show 6 TXT records

mx-2806d8f413e73b3c
MS=0B3774D3F696A68E95FC23FBD03CC681C5B9A450
QuoVadis=e2b5b301-6422-4242-8d65-d97d884ef57d
identrust_validation=0+xazyCaaf4D3UMwsE2sfZ84n1fzoeA/TLJViVmoQ8YC
deepbox-verification=89Ze0Pqpoj7dmFTWvSKYDNJt
swisssign-check=lEPGLNcMrQs35n3kDi0Opdbl6Rg

Verified for

Apple
Cisco
Google

Email authentication strong

SPF

v=spf1 mx ip4:31.10.223.69 ip4:31.10.223.74 ip4:31.10.223.110 ip4:31.10.223.102 ip4:31.10.223.103 -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-rua@shkb.ch; ruf=mailto:dmarc-ruf@shkb.ch; fo=1;

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; s=email; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nOfvaN9cTJND11doxpSQumXKZ7COxX7ZyH527LqgYs1tHMA0168tsiduKRgTrHYRyaMO…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.shkb.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: same-origin
x-frame-options: allow-from https://www.shkb.ch/
permissions-policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self), xr-spatial-tracking=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.aiaibot.com; block-all-mixed-content ; base-uri 'self'; frame-ancestors 'self' https://www.shkb.ch; img-src 'self' https://www.shkb.ch data: shkb-dev.rokka.io shkb-live.rokka.io image.shkb.ch shkb.containers.piwik.pro shkb.piwik.pro cdn.cookielaw.org; worker-src 'self' https://www.shkb.ch; style-src 'self' https://www.shkb.ch 'unsafe-inline' *.google.com *.googleapis.com shkb.containers.piwik.pro; script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' https://www.shkb.ch shkb.containers.piwik.pro shkb.piwik.pro chat.aiaibot.com cdn.cookielaw.org unpkg.com; connect-src 'self' https://www.shkb.ch shkb.containers.piwik.pro shkb.piwik.pro api.aiaibot.com cdn.cookielaw.org *.onetrust.com wwwsec.shkb.ch; frame-src 'self' *.vimeo.com https://www.shkb.ch *.aiaibot.com; manifest-src 'self'; media-src 'self' https://www.shkb.ch; font-src 'self' data: shkb.containers.piwik.pro shkb.piwik.pro; form-action 'self'; object-src 'none'
strict-transport-security: max-age=31536000