lemonbrain.ch

.ch crawl

First seen 2026-05-27 · Last seen 2026-05-31 · ok HTTP/1.1 200 481 ms crawled 2026-05-30

CH · 193.93.23.34 · AS31052 Exigo AG

Reputation 100/100

Classifying

HTML metadata

Title: Webagentur im Herzen Glarus
Description: Fullstack Web-Applikations-Entwickler mit Kundenbetreuung
Language: en
Generator: Concrete CMS
Canonical: https://lemonbrain.ch/

Open Graph

url: https://lemonbrain.ch/
title: Home
locale: en_CH
image:url: https://lemonbrain.ch/application/files/9617/1766/4621/Profilbild.jpg
site name: lemonbrain Webagentur Glarus

Technology

Server: Apache

Contact

Phone

+41555364041

Address

Burgstrasse 18750 Glaruswindow.addEventListener("load", function() {window.spa.util.mailAddr.helper('["70;;@o;4=@?1C08?_27","34611d594256b202b7",null,"","","",""]');});+41 55 536 40 41

DNS records live

NS

ns01.lemonbrain.ch
ns02.lemonbrain.ch

MX

10 mail.lemonbrain.ch

TXT

atlassian-sending-domain-verification=affe258d-6582-4a50-897a-64ecdf080aa2

Verified for

Atlassian
Google

Email authentication strong

SPF

v=spf1 a mx -all

strict (-all)

DMARC

v=DMARC1; p=reject; ruf=mailto:info@lemonbrain.ch; fo=1

policy: reject (enforced)

DKIM

default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC093MYO+2T1zDn51ir/Gy6SB3863HgPj+8OIKoFzTKThBwZV7bojngT3lUUrhVLDQ/8DfyQld4umbYr1pE0j…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-08-22 to 2026-09-23

Expires in 114 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://lemonbrain.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer
x-frame-options: DENY
permissions-policy: geolocation=self, microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'none'; base-uri 'self'; connect-src 'self'; frame-src 'self'; form-action 'self'; img-src 'self' data: https: blob:; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; font-src 'self'; object-src 'self'; media-src 'self';
strict-transport-security: max-age=63072000;includeSubDomains;preload
cross-origin-resource-policy: same-origin