sinef.ch

HTML metadata

Title

SINEF · SINEF SA

Language

fr

Generator

TYPO3 CMS

Canonical

https://www.sinef.ch/

Translations

de
fr

Open Graph

title: SINEF
locale: fr-CH
site name: SINEF SA
locale:alternate: de-CH

Technology

Server: nginx
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

www.googletagmanager.com×2
ajax.googleapis.com×1
code.jquery.com×1
fonts.googleapis.com×1

Social

Contact

Phone

+41263501160

Address

Route des Fluides 1, 1762, Givisiez, FR, Suisse

DNS records live

NS

ns1.swisscenter.com
ns2.swisscenter.com
ns3.swisscenter.com
ns4.swisscenter.com

MX

0 sinef-ch.mail.protection.outlook.com

TXT

Show 4 TXT records

sophos-domain-verification=abe305cb8e3b963b15b5639d2757d150b47b42c875d694af1888ed92701e13d4
a51s252isqlgki258uepn7rcsg
teih917uu9jubdhmp0k79h5j79
5efu3aolb611g6p5vqgcvo8agv

Verified for

Microsoft 365

Email authentication weak

SPF

v=spf1 ip4:80.74.159.65 ip4:146.4.47.122 ip4:85.90.9.227 ip4:85.90.12.242 include:spf.protection.outlook.com -all

strict (-all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4rsAz6MB2wv6fdydS9K4HHsg4NbeQ851c4ShLlZl+82mw69a5qjXxXLHQVpvO1XFwq7zRa332eJODE3JQFG…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpxHReT5EK9L7/kLLuiNyKAySvhzlSLFXZ9vIn7gJHcy5TBze8ahrXIOQ+hwaKQ6GYdhoUV6wvGnu8BsUe7i…

selectors probed

Certificate (current)

R13

from 2026-05-25 to 2026-08-23

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sinef.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.g.doubleclick.net *.google-analytics.com *.gstatic.com; script-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.visme.co code.jquery.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.gstatic.com; base-uri 'self'; frame-src 'self' *.google.com *.theodia.org *.youtube-nocookie.com *.visme.co *.youtube.com; style-src 'self' *.g.doubleclick.net *.google-analytics.com *.gstatic.com 'unsafe-inline' data: *.googleapis.com *.theodia.org 'report-sample'; report-uri https://www.sinef.ch/@http-reporting?csp=report&requestTime=1780003092377430&requestHash=1b551c8b35a75532e9d05a7d82bc267191ccee3b
strict-transport-security: max-age=31536000; includeSubDomains