indexo.dev

kaleidos.ch

.ch crawl

First seen 2026-05-18 · Last seen 2026-05-18 · ok HTTP/1.1 200 4362 ms crawled 2026-05-23

CH · 217.26.53.194 · AS29097 Hostpoint AG

Reputation 92/100 no dmarc policy

sector b2b services type homepage

HTML metadata

Title
Kaleidos macht Sie präsent
Description
Kaleidos gibt Ihrer Firma, Organisation oder persönlichen Laufbahn das passende, wirksame Profil. Kreativ und innovativ seit 1995.
Language
de
Generator
WordPress 6.9.4
Canonical
https://kaleidos.ch/
Feeds

Open Graph

url
https://kaleidos.ch/
title
Kaleidos macht Sie präsent
locale
de_DE
site name
Kaleidos AG
description
Kaleidos gibt Ihrer Firma, Organisation oder persönlichen Laufbahn das passende, wirksame Profil. Kreativ und innovativ seit 1995.

Technology

Server
Apache
CMS
WordPress 6.9.4
jQuery
3.7.1

Third-party hosts loaded (1)

  • gmpg.org×1

Contact

Email

DNS records live

NS
  • ns.hostpoint.ch
  • ns2.hostpoint.ch
  • ns3.hostpoint.ch
MX
  • 10 mx1.mail.hostpoint.ch
  • 10 mx2.mail.hostpoint.ch

Email authentication weak

SPF
v=spf1 redirect=spf-permissive.mail.hostpoint.ch
missing all
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-11 to 2026-08-09
Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://kaleidos.ch/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
permissions-policy
camera=(), microphone=(), geolocation=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: data: https://maps.googleapis.com; frame-src 'self' https://www.google.com https://maps.google.com; worker-src 'self' blob: data:; upgrade-insecure-requests;
strict-transport-security
max-age=300; includeSubDomains; preload

Linked from (1)