indexo.dev

switch.ch

.ch crawl dns

First seen 2026-05-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 4166 ms crawled 2026-05-16

CH · 130.59.31.80 · AS559 SWITCH

Reputation 100/100

Classifying

Technology

CDN
Azure Front Door

DNS records live

NS
  • ns2.switch.ch
  • ns3.switch.ch
  • scsnms.switch.ch
MX
  • 10 mx3.switch.ch
  • 10 mx4.switch.ch
TXT
  • site24x7-signals-domain-verification=d53578a801414390c879d70641249683
  • atlassian-domain-verification=LV3PhCzoln33rO58n9v1to4WeJqwdmChSHt43DWuTnLjw7rXLN6XeMsrqU3SEO6H
  • mx-f2d46892293eab88

Email authentication strong

SPF
v=spf1 exists:%{ir}.spf.switch.ch include:mail.zendesk.com include:spf.protection.outlook.com include:spf.mailjet.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:dmarc-rua@switch.ch; fo=1; adkim=r; aspf=r
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkVbG7YS7g8bWQAHwy6yAQlWgngOs8MI9sjrOeE//EaKNZSsoKBgZCaDvAOawAhpJWFn/ewy4h2Vy4…
selectors probed

Certificate (current)

DigiCert EV RSA CA G2
from 2025-10-28 to 2026-10-28
Expires in 161 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.switch.ch/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options
nosniff
content-security-policy
base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' *.switch.ch *.swcdr.unic24a.net *.unic24a.dev *.umantis.com; img-src 'self' *.switch.ch *.swcdr.unic24a.net *.unic24a.dev data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests; connect-src 'self' *.switch.ch *.swcdr.unic24a.net *.unic24a.dev tracker.switch.ch; frame-src 'self' *.youtube.com *.vimeo.com *.switch.ch; media-src 'self' *.switch.ch *.swcdr.unic24a.net *.unic24a.dev *.ytimg.com; script-src-elem 'self' 'unsafe-inline' *.switch.ch tracker.switch.ch; script-src 'self' report-sample 'unsafe-inline' 'unsafe-eval'
strict-transport-security
max-age=31536000; includeSubDomains; preload

Linked from (6)