cibtvisas.ch

HTML metadata

Title: Travel Visas for Business Travel and Tourism | Fast, Easy, Secure | CIBTvisas
Description: CIBTvisas is the global leader in travel visas. Millions of international travellers have trusted CIBTvisas to secure their business visas or tourist visas.
Language: en
Canonical: https://cibtvisas.ch/

Open Graph

url: http://cibtvisas.ch/
title: Travel Visas for Business Travel and Tourism | Fast, Easy, Secure | CIBTvisas
description: CIBTvisas is the global leader in travel visas. Millions of international travellers have trusted CIBTvisas to secure their business visas or tourist visas.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
www.googletagmanager.com×2
ajax.googleapis.com×1
fonts.gstatic.com×1

Social

Contact

Phone

DNS records live

NS

jamie.ns.cloudflare.com
nolan.ns.cloudflare.com

MX

0 cibtvisas-ch.mail.protection.outlook.com

TXT

Show 6 TXT records

rhgt1hr1hen7hiku90n7grmon3
v=msv1 t=4AFE2784-49E4-465A-AC74-D275B8B71FCA
google-site-verification=0itt5cS4_OJ9n_ULyGghQY3qRIe6nz7CKXjqs8RCZ-0
kj0t1vgdifkrqik82henj1dcb2
obpg5alqdrc57v08k87senflis
ppjv70jk4bk6lmkomib5f2emuo

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.emailcampaigns.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:42d2557a2906367@rep.dmarcanalyzer.com; ruf=mailto:42d2557a2906367@for.dmarcanalyzer.com; fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5w5aTp49Kd55arO4BWdL6or9xbAJ7nMwqdqEIsCXX6OttEvJ5s5M7y7RTUgzKtXGi0ft1dwQkIQht…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E5+AMeuFhDqmSyziCmpbmFt/3/nqR7+uYrwxqFK9t+ehfljuI8NiAGD0GHwGqKqJBFu/Jt1Yn+Hbj…

selectors probed

Certificate (current)

E7

from 2026-04-02 to 2026-07-01

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://cibtvisas.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src * 'self' 'unsafe-inline'; script-src * 'self' 'unsafe-inline' 'unsafe-eval' https://acsbapp.com/ https://*.googleapis.com/ https://bat.bing.com/ https://*.quantummetric.com/ https://*.osano.com/ https://*.doubleclick.net/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com https://*.google.co.uk https://js.stripe.com/ https://cdn.logrocket.io https://cdn.lr-ingest.io https://cdn.lr-in.com https://cdn.lr-in-prod.com https://cdn.lr-ingest.com https://cdn.ingest-lr.com https://cdn.lr-intake.com https://cdn.intake-lr.com https://cdn.logr-ingest.com https://cdn.lrkt-in.com https://cdn.lgrckt-in.com/ blob: 'unsafe-inline' 'unsafe-eval' 'self'; frame-ancestors 'self'; form-action *; font-src https://fonts.gstatic.com/ https://*.acsbapp.com 'self' data:; img-src www.googletagmanager.com https://*.acsbapp.com https://www.facebook.com https://*.bing.com https://*.google.com https://*.google.co.uk https://*.google.co.in https://*.google.rs https://*.
strict-transport-security: max-age=15724800; includeSubDomains