companyon.ch

.ch crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 662 ms crawled 2026-06-02

CH · 185.137.172.229 · AS13030 Init7 (Switzerland) Ltd.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
CompanyON
Language
de

Technology

CMS
Gatsby

DNS records live

NS
  • merkur.geoweb.ch
  • merkur.holzapfel.ch
  • merkur.safebits.org
  • merkur.waldvogel.family
MX
  • 10 mail.netfuture.ch
Verified for
  • Google

Email authentication strong

SPF
v=spf1 mx a:relay.holzapfel.ch a:relay.netfuture.ch -all
strict (-all)
DMARC
v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; rua=mailto:dkim@netfuture.ch; fo=1:d:s; ruf=mailto:dkim@netfuture.ch
policy: reject (enforced) · sp=reject
DKIM
  • dkim: v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrrdUF3ogR00s2ePHUsuHOtooV0q021zqN08yBsmczDfc7IRvwoYYWpLUA9gPOfKgW/p…
selectors probed

Certificate (current)

E8
from 2026-04-06 to 2026-07-05
Expires in 24 days

HTTP security headers

Header hygiene 40/100 Checked live page: https://companyon.ch/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
; img-src 'self' data: https://uploads.companyon.ch; font-src 'self'; base-uri 'none'; frame-src 'none'; media-src 'self' mediastream: https://upload.companyon.ch; object-src 'none'; script-src 'self' 'unsafe-inline' blob:; style-src 'self' 'unsafe-inline'; connect-src 'self' https://uploads.companyon.ch https://api.companyon.ch wss://api.companyon.ch; manifest-src https://api.companyon.ch; prefetch-src 'self' https://*.companyon.ch; form-action 'self'; frame-ancestors: 'none';

Linked from (1)

Use this data via API

Everything on this page for companyon.ch is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/companyon.ch" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →