indexo.dev

vzai.ch

.ch crawl

First seen 2026-06-02 · Last seen 2026-06-03 · ok HTTP/1.1 200 322 ms crawled 2026-06-03

CH · 149.126.4.135 · AS47302 cyon AG

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
VZAI – Ihre starke Stimme für Arbeitgeber im Kanton Zürich
Description
«Die VZAI ist eine spannende Organisation und bringt Verwaltung, Politik und Wirtschaft im Kanton Zürich zusammen. Sie befasst sich mit allen arbeitgeberrelevan…
Language
de-CH
Canonical
https://vzai.ch/
Feeds

Open Graph

url
https://vzai.ch/
title
VZAI – Ihre starke Stimme für Arbeitgeber im Kanton Zürich
locale
de_CH
site name
VZAI
description
«Die VZAI ist eine spannende Organisation und bringt Verwaltung, Politik und Wirtschaft im Kanton Zürich zusammen. Sie befasst sich mit allen arbeitgeberrelevan…

Technology

CMS
WordPress

Third-party hosts loaded (2)

  • app.privacybee.io×1
  • vzai.stutz-medien.dev×1

Contact

Email
Phone

DNS records live

NS
  • ns1.cyon.ch
  • ns2.cyon.ch
MX
  • 0 mail.vzai.ch
Verified for
  • Google

Email authentication weak

SPF
v=spf1 include:spf.protection.cyon.net -all
strict (-all)
DMARC
not published
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgejWtuwLIPlnN22ZplovVQswaKz+sCoz2UlGFSQoflhY2U2HrD0NxokHlIRjr6zTXiq2dONvu56bN…
selectors probed

Certificate (current)

R13
from 2026-04-10 to 2026-07-09
Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://vzai.ch/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' *.stutz-medien.dev; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wordpress.org *.wp.com *.stutz-medien.dev *.googletagmanager.com *.google.com *.gstatic.com *.typekit.net s3.amazonaws.com *.list-manage.com *.userback.io privacybee.io *.privacybee.io; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' *.wp.com *.stutz-medien.dev *.googleapis.com *.typekit.net *.userback.io privacybee.io *.privacybee.io; img-src 'self' data: *.wp.com *.wordpress.org *.gravatar.com *.stutz-medien.dev *.userback.io privacybee.io *.privacybee.io; font-src 'self' data: *.stutz-medien.dev *.gstatic.com *.typekit.net *.typekit.com *.userback.io privacybee.io *.privacybee.io; frame-src 'self' *.stutz-medien.dev *.youtube.com *.google.com *.vimeo.com *.userback.io privacybee.io *.privacybee.io; frame-ancestors 'self'; media-src 'self' *.stutz-medien.dev; connect-src 'self' *.stutz-medien.dev *.google.com *.userback.io *.amazonaws.com *.googletagmanager.com *.google-analytics.com pr
strict-transport-security
max-age=31536000

Links to (22)

Linked from (2)