sabag.ch

HTML metadata

Title: Innenausbau | SABAG
Description: Passend zu Ihrem Lebensstil: Lassen Sie sich durch unsere Stilwelten inspirieren und finden Sie mit uns die richtigen Produkte für Ihr Zuhause.
Language: en

Open Graph

url: https://www.sabag.ch/de/innenausbau
title: Innenausbau | SABAG
description: Passend zu Ihrem Lebensstil: Lassen Sie sich durch unsere Stilwelten inspirieren und finden Sie mit uns die richtigen Produkte für Ihr Zuhause.

Technology

CMS: Next.js
JS framework: Next.js

Third-party hosts loaded (1)

storage.googleapis.com×17

Social

DNS records live

NS

tess.ns.cloudflare.com
tim.ns.cloudflare.com

MX

5 sabag-ch.mail.protection.outlook.com

TXT

Show 6 TXT records

1rt3ejgv58eqfa27pips2a2jd0
313c311396474ceaffd7b8a2b3a5bc23ffff88f8a1a9d00e4e
38n4sdoq8gumg9k6ke4p7i5ppd
GUExVJ9gOaWKoq5kydU7E4+h1Jf10rB2v+ON01o2P5NysWeIDYFl+qp3EF9OEQ6hxHrrhwjx4VFXfGjjSILwlA==
mx-676e1aa3610e5314
pardot659893=e7e538faea47f36f86657ce56fb1351b496e6f4a6e713d1f237f8394d00da147

Verified for

Apple
Atlassian
Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 mx ip4:83.144.254.184 ip4:84.20.53.231 include:aspmx.pardot.com include:spf.protection.outlook.com include:spf-de.emailsignatures365.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@sabag.ch; ruf=mailto:dmarc@sabag.ch; fo=1; aspf=r; adkim=r;

policy: quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlkrVQPJv0KQtLSnX3DX21xxRE216KKxO8q1UGhVDzjiDn0jJStHjTF5ZeDAXGSXMyr6YGijWEK162Y3BgSU…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+2Cel6x4n7bvyzFEkUNvHjP7dLJPa/Mo6K7UwlfSTM46QIbjCA/Y/6HA1Nw+rHKLauJGQFH+d9Ewp…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTRLB1Hs2zGuqpqlaM4pau0RL7C0vBqN+39wkYwHzK3irGVayq4tjpRxpO03K2GEjRnFVjYoLeOI3VFa0Y…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAPRjI76liEpgL/a7GlqM6VrAJVB7qq8YMl/vVibWeqLP0DuQ8K/6ow2aRoWPdhG94rS/j+uAjVLKlkdiKAzvdBx…

selectors probed

Certificate (current)

R12

from 2026-04-20 to 2026-07-19

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.sabag.ch/de/innenausbau

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: sameorigin
permissions-policy: clipboard-read=(),clipboard-write=(self),gamepad=(),speaker-selection=(),accelerometer=(),ambient-light-sensor=(),autoplay=(),battery=(),camera=(),cross-origin-isolated=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),fullscreen=(self),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),navigation-override=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(),usb=(),web-share=(),xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none';child-src 'none';connect-src 'self' https://storage.googleapis.com/ https://sgvsbws.mycontent.ch https://maps.googleapis.com/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.youtube.com https://api-produkte.www.sabag.ch https://cmsv2-admin.sabag.ch.ufirst.io https://api-ecommerce.sabag.ch;default-src 'self';font-src 'self' https://fonts.gstatic.com/;form-action 'self';frame-ancestors 'none';frame-src 'self' https://www.youtube.com https://bid.g.doubleclick.net;img-src 'self' https://static.produkte.sabag.ch https://sgvsbws.mycontent.ch https://storage.googleapis.com https://i.ytimg.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://*.google-analytics.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com data: maps.gstatic.com *.googleapis.com
strict-transport-security: max-age=31536000; includeSubDomains