dialogluzern.ch

.ch crawl

First seen 2026-05-12 · Last seen 2026-05-12 · ok HTTP/1.1 200 9697 ms crawled 2026-05-18

CH · 5.102.150.2 · AS59414 cloudscale.ch AG

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Dialog Luzern

Language

Translations

Open Graph

url: https://dialogluzern.ch/
title: Dialog Luzern

Technology

Server: nginx

Analytics

Matomo

Third-party hosts loaded (2)

ocp4-pitc-stlu-decidim-prod.objects.rma.cloudscale.ch×15
ocl-test.matomo.cloud×1

DNS records live

NS

ns1.tiberius.sui-inter.net
ns2.tiberius.sui-inter.net

MX

0 mail.dialogluzern.ch

Email authentication weak

SPF: v=spf1 include:_spf.sui-inter.net +mx +a -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-23 to 2026-07-22

Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://dialogluzern.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: unload=(self)
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' 'unsafe-inline' ocp4-pitc-stlu-decidim-prod.objects.rma.cloudscale.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.intergram.xyz cdn.matomo.cloud ocl-test.matomo.cloud; style-src 'self' 'unsafe-inline'; img-src 'self' *.hereapi.com data: *.geo.admin.ch ocp4-pitc-stlu-decidim-prod.objects.rma.cloudscale.ch ocl-test.matomo.cloud; font-src 'self' data:; connect-src 'self' *.hereapi.com data: photon.komoot.io ocp4-pitc-stlu-decidim-prod.objects.rma.cloudscale.ch ocl-test.matomo.cloud; frame-src 'self' www.youtube-nocookie.com player.vimeo.com https://www.intergram.xyz player.twitch.tv meet.jit.si www.youtube.com; media-src 'self' ocp4-pitc-stlu-decidim-prod.objects.rma.cloudscale.ch data:
strict-transport-security: max-age=31536000; includeSubDomains, max-age=63072000; includeSubDomains