vontobel.com
HTML metadata
Technology
- CDN
- Azure Front Door
- CMS
- Next.js
Social
Contact
- Address
- Gotthardstrasse 43, 8022, Zurich, CH
Registration
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 1996-04-01
- Expires
- 2027-04-02 318 days left
- Updated
- 2026-03-29
- Name servers
-
- udns1.cscdns.net
- udns2.cscdns.uk
DNS records live
- NS
-
- udns1.cscdns.net
- udns2.cscdns.uk
- MX
-
- 10 mx1.vontobel.com
- 10 mx2.vontobel.com
- TXT
-
Show 19 TXT records
swisssign-check=7dk3EUAe4B7Zcy_20bpn45qnnEkcisco-ci-domain-verification=4527a87d71ec526190e8f543df446dd8b4133387ae54a2572fbf7b5d7fab771QuoVadis=61274495-416f-468f-9d32-b46259ab8f6cgoogle-site-verification=88m0kpdoZGVjCnhC4P6rKza_J3Y1RXvC38mS1im-4SYdocusign=0378adcd-81b8-4d18-9f38-072104026d5ddfgsIRX+PoyIYFlqRgiqbZgOMnSCu/E579YJgtxK+bdzkbHsuAqe10BpdLP1q4l3avGi+y2wE1QSvrFDGPJhZA==adobe-idp-site-verification=03ddf104842b81f73f4470775817f1ab660ce0edea54c59e0491ab3d73d630aaatlassian-domain-verification=CsQBvOkmk1Rkt4ztbl1zk1YNt5HPZEHtMly4BbILPS8f+AHgN7BLJg6ByclpDb26SFMC-qxCi2Tm7zrjV2lflhwsfNNwJAzyVZ_QAwVC1nOlrswisssign-check=1z1kVddgsCgvy02WQBvESAlOyf4google-site-verification=F_RHRj7fXiNCe3WEF6UleVOeIhfATl5XvpQLgdLVtG8swisssign-check=nUPxe8oGbJR4dXhTHTJaYo-eTVgMS=ms96078958apple-domain-verification=0dXz5-NNNXgVR1bkV-YV3li8tHIoPN3UAyeBCWGKDZcSFMC-lvIzL_dmUsv_nHFR18KgdJMRUDX245Bj-nBPGfCSSFMC-0CA8RLB3_iAI9W1L-lYgAUG0gXTSHExFj4BKVfBYdocusign=2ae4887a-82f9-4739-a6f8-c42eb81e1255google-site-verification=thZxSN9tKesNR371f103Yk2YLh-SihMqq09qOsURV2cSFMC-ZzaZP34De3JleanLGwvKyv-VUHgtBBJDWJYG8omN
Email authentication strong
- SPF
-
v=spf1 mx ip4:194.56.165.155/32 ip4:194.56.165.156/32 ip4:194.56.165.159/32 ip4:194.56.165.160/32 ip4:212.31.253.42/32 ip4:212.239.29.252/32 include:cust-spf.exacttarget.com include:_spfip.aspectra.com include:seismic-spf.vontobel.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:i27kycdy3o@rua.powerdmarc.com; ruf=mailto:psadmin@vontobel.com; rf=afrf; fo=1; ri=86400policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
DigiCert EV RSA CA G2
Expires in 136 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
connect-src 'self' webapi.vontobel.com vta.vontobel.com vcd.vontobel.com vimeo.com *.cloudfront.net *.usabilla.com cloud.mail.vontobel.com google.com *.google.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net pagead2.googlesyndication.com www.googleadservices.com; frame-src blob: player.vimeo.com *.cloudfront.net *.usabilla.com cloud.mail.vontobel.com irs.tools.investis.com deepcontent.github.io media10.simplex.tv www.googletagmanager.com *.doubleclick.net; img-src 'self' data: blob: vta.vontobel.com vcd.vontobel.com img.vontobel.com res.cloudinary.com *.vimeocdn.com vontobel-cloudbased-streaming.s3.amazonaws.com *.cloudfront.net *.usabilla.com cloud.mail.vontobel.com deepcontent.github.io *.gstatic.com okt.to google.com *.google.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net ade.googlesyndication.com pagead2.googlesyndication.com www.googleadservices.com; media-src 'self' data: blob: img.vontobel.com res.cloudinary.com *.vimeocdn.com vontobel-clo- strict-transport-security
max-age=63072000; includeSubDomains; preload