indexo.dev

vestagmbh.ch

.ch crawl

First seen 2026-06-04 · Last seen 2026-06-04 · ok HTTP/1.1 200 1433 ms crawled 2026-06-04

US · 162.159.140.42 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Bauprojektmanagement für Ladenbau, Gewerbeprojekte und Privatumbauten
Description
Vesta bietet professionelles Baumanagement im Ladenbau, Gewerbeumbau und Privatumbau. Wir gewährleisten Präzision, Termintreue und Qualität für individuelle Lösungen.
Language
de

Open Graph

url
https://vestagmbh.ch/
title
Bauprojektmanagement für Ladenbau, Gewerbeprojekte und Privatumbauten
description
Vesta bietet professionelles Baumanagement im Ladenbau, Gewerbeumbau und Privatumbau. Wir gewährleisten Präzision, Termintreue und Qualität für individuelle Lösungen.

Technology

CDN
Cloudflare
CMS
Next.js
JS framework
Next.js, React
Analytics
  • Cloudflare Insights

Third-party hosts loaded (2)

  • cdn.durable.co×2
  • static.cloudflareinsights.com×1

DNS records live

NS
  • ns.hostpoint.ch
  • ns2.hostpoint.ch
  • ns3.hostpoint.ch
MX
  • 0 vestagmbh-ch.mail.protection.outlook.com

Email authentication weak

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-28 to 2026-07-27
Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://vestagmbh.ch/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
Header values
referrer-policy
origin
x-frame-options
ALLOWALL
permissions-policy
fullscreen=*
x-content-type-options
nosniff
content-security-policy
default-src * data: blob: http: https: 'self' https://*.durable.co https://*.durable.com 'unsafe-inline' *.durable.co *.durable.com 'unsafe-eval';
strict-transport-security
max-age=15552000; includeSubDomains
cross-origin-opener-policy
cross-origin
cross-origin-embedder-policy
unsafe-none
cross-origin-resource-policy
cross-origin

Links to (1)

Linked from (1)