estermann.ch

.ch crawl

First seen 2026-05-26 · Last seen 2026-05-31 · ok HTTP/1.1 200 2257 ms crawled 2026-05-30

US · 3.165.190.39 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Estermann Baugruppe : Baugeschäft Zentralschweiz, Sursee
Description: Die Estermann Baugruppe realisiert auch Ihre Visionen in der Zentralschweiz, Luzern, Zug, Basel, Bern, Zürich und Sursee.
Language: de
Generator: Contens
Canonical: https://www.estermann.ch/home

Open Graph

url: https://www.estermann.ch/home
title: Estermann Baugruppe : Baugeschäft Zentralschweiz, Sursee
description: Die Estermann Baugruppe realisiert auch Ihre Visionen in der Zentralschweiz, Luzern, Zug, Basel, Bern, Zürich und Sursee.

Technology

CDN: Amazon CloudFront
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdn.cookiehub.eu×1
www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS

ns1.hostserv.eu
ns2.hostserv.eu
ns3.hostserv.eu

MX

10 estermann-ch.mail.protection.outlook.com

TXT

QuoVadis=2284e532-aecb-4aa1-b924-224d576be9c3

Verified for

Apple
Microsoft 365

Email authentication strong

SPF: v=spf1 mx ip4:46.140.101.156 include:spf.protection.outlook.com include:spf.creanet.ch include:spf.cloud.ci-solution.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; pct=100
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2026-04-05 to 2026-10-20

Expires in 141 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.estermann.ch/home

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'none'; base-uri 'self'; script-src 'strict-dynamic' 'nonce-00FB7CD113944D23A1F5C317BA1F1E17' https://www.creanet.ch/unsafeeval; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cookiehub.net https://cdn.cookiehub.eu https://*.privacybee.io; img-src 'self' data: https://d2iiunr5ws5ch1.cloudfront.net https://maps.google.com https://maps.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://img.youtube.com https://i.ytimg.com https://i.vimeocdn.com https://bugherd-attachments.s3.amazonaws.com https://www.bugherd.com; media-src 'self'; frame-src 'self' https://www.google.com https://*.youtube.com https://*.youtu.be https://www.youtube-nocookie.com https://player.vimeo.com https://sidebar.bugherd.com https://feed.yellow.camera/QYXMMR9MG https://avisec.com; frame-ancestors https://*.creanet.ch; font-src 'self' data: https://maps.google.com https://fonts.googleapis.com https://fonts.gstatic.com; form-action 'self'; connect-src 'self' h
strict-transport-security: max-age=31536000

Links to (14)

Linked from (6)