szkb.ch

HTML metadata

Title: Schwyzer Kantonalbank - Gut beraten, Schwyzer Art
Description: Die Schwyzer Kantonalbank (SZKB) bietet Privat-, Unternehmens- und institutionellen Kunden Lösungen rund ums Zahlen & Sparen, Finanzieren sowie Vorsorgen und Anlegen.
Language: de-CH
Canonical: https://www.szkb.ch

Open Graph

url: https://www.szkb.ch
title: Schwyzer Kantonalbank - Gut beraten, Schwyzer Art
site name: SZKB
description: Die Schwyzer Kantonalbank (SZKB) bietet Privat-, Unternehmens- und institutionellen Kunden Lösungen rund ums Zahlen & Sparen, Finanzieren sowie Vorsorgen und Anlegen.

Technology

Server: Apache

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (4)

privacy-proxy.usercentrics.eu×3
siteimproveanalytics.com×1
web.cmp.usercentrics.eu×1
www.googletagmanager.com×1

Social

Contact

Phone

+41588002020

DNS records live

NS

sec1.rcode0.net
sec2.rcode0.net

MX

10 mx5.szkb.ch
10 mx6.szkb.ch

TXT

Show 6 TXT records

swisssign-check=uvw9ouFeK0X4LgWb2LIWhEi7vro
infoblox-domain-mastery=2fb107af457054fad3c29cfb025c761c9c31e32a5cad5b1a9335be76b6976207e4
MS=A1B38EB8F599332E799BC41CB6E2944AB88EBD22
myedi-site-verification=esZmaLHPH8kzplyauu1I
successfactors-site-verification=ZDJiNjcyNzJiMTg1NWZlYWEwNjdjYWIxMzFkODA4NjUwZDcwYmQ2OGIyZTgwNTc4YWViN2ZlZWNiMmNkNTA1ZA==
citrix.mobile.ads.otp=xwr7m2ziwg1h4ot7sl7by

Verified for

Cisco
Google
Microsoft 365

Email authentication partial

SPF: v=spf1 mx a:mail01.mychoice.ch. a:mail02.mychoice.ch. include:_spf1.szkb.ch include:_spf2.szkb.ch include:_spf01.eyevip.ch include:_spf-dc12.successfactors.com -all
strict (-all)
DMARC: v=DMARC1;p=none;pct=100;sp=none;rua=mailto:netadmin@szkb.ch;ruf=mailto:netadmin@szkb.ch;fo=1
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

SwissSign RSA TLS EV ICA 2022 - 1

from 2025-07-24 to 2026-07-24

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.szkb.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src *.google-analytics.com https://*.googletagmanager.com cdnjs.cloudflare.com https://siteimproveanalytics.com https://maps.googleapis.com https://*.youtube.com 'self' https://cdn.insight.sitefinity.com https://dec.azureedge.net https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api https://*.usercentrics.eu; style-src https://*.googleapis.com/ 'self' 'unsafe-inline' https://cdn.insight.sitefinity.com https://dec.azureedge.net; img-src https://*.googletagmanager.com https://*.ytimg.com https://*.youtube.com https://maps.gstatic.com https://*.googleapis.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com https://*.siteimproveanalytics.io https://cdn.insight.sitefinity.com https://dec.azureedge.net 'self' data: blob: https://*.usercentrics.eu; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ apis.google.com https://www.google.co
strict-transport-security: max-age=31536000; includeSubDomains; preload