koestingerag.ch

HTML metadata

Title: Köstinger AG :: Ihr Partner für Parkett, Laminat, Kork, Linoleum
Description: Köstinger AG, Felsberg Chur Graubünden. Ihr Partner für Parkett, Laminat, Kork, Linoleum, PVC, Celenio, Teppich.
Language: de
Generator: Contens
Canonical: https://www.koestingerag.ch/home

Open Graph

url: https://www.koestingerag.ch/home
title: Köstinger AG :: Ihr Partner für Parkett, Laminat, Kork, Linoleum
description: Köstinger AG, Felsberg Chur Graubünden. Ihr Partner für Parkett, Laminat, Kork, Linoleum, PVC, Celenio, Teppich.

Technology

CDN: Amazon CloudFront
jQuery: 3.6.1

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Contact

Phone

+41 81 252 89 21

DNS records live

NS

ns-1188.awsdns-20.org
ns-1931.awsdns-49.co.uk
ns-74.awsdns-09.com
ns-890.awsdns-47.net

MX

0 koestingerag-ch.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.creanet.ch -all

strict (-all)

DMARC

v=DMARC1;p=quarantine;adkim=s;aspf=s

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHXDda2IeUFv0evfmqpBcIrEJvmy/0knKAVjpQ4lnDl2o7152Dww3joCKNxs52BR6HPvvyRTgkRZaHCI3vOu…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-10 to 2026-12-10

Expires in 192 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.koestingerag.ch/home

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'strict-dynamic' 'nonce-BD41C0928059449DAE4A87F284CFF48D' https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtag/js https://cookiehub.net https://cdn.cookiehub.eu; style-src 'self' 'unsafe-inline' https://cookiehub.net https://cdn.cookiehub.eu https://static.cookiehub.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://maps.google.com; frame-src 'self' https://ea.sendcockpit.com https://www.google.com https://*.youtube.com https://*.youtu.be; frame-ancestors https://*.creanet.ch; form-action 'self'; connect-src 'self' https://region1.google-analytics.com/g/collect https://maps.googleapis.com https://ds.cookiehub.net https://consent.cookiehub.net https://region-eu.cookiehub.net https://consent-eu.cookiehub.net
strict-transport-security: max-age=31536000