americanexpress.ch

HTML metadata

Title

Credit card from American Express | American Express Switzerland

Description

American Express Credit Cards. Discover the products & services of American Express in Switzerland.

Language

en

Canonical

https://www.americanexpress.ch/en

Translations

de
en
fr
it

Open Graph

url: https://www.americanexpress.ch/en
title: Credit card from American Express | American Express Switzerland
site name: American Express Switzerland
description: American Express Credit Cards. Discover the products & services of American Express in Switzerland.

Technology

Server: Apache
Stack: Java

Fonts

Adobe Fonts

Third-party hosts loaded (3)

use.typekit.net×3
p.typekit.net×2
assets.adobedtm.com×1

Social

DNS records live

NS

a1-196.akam.net
a13-65.akam.net
a22-66.akam.net
a24-67.akam.net
a8-64.akam.net
a9-65.akam.net

MX

10 outmail.myr.is

TXT

Show 7 TXT records

ctwc3tpnmnhw2s7cc07rny3ty7twm354
n4kj396rxql61g1gwz2zxstm6y84z2l7
yztv3xw7qtxq05th3jr4l7722110k72k
669pvbr5j49y4xt6p902c9d8bk423svj
_1ro3yzl6r9njobi1z650ew5913e82nb
xgn62m6qltph1j2mtp7c7l46g47sxfn0
bcm3w51nj97l8gx52mmb09c9d3k4424y

Email authentication strong

SPF: v=spf1 include:myr.is -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_agg@auth.returnpath.net; ruf=mailto:dmarc_afrf@auth.returnpath.net
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert EV RSA CA G2

from 2025-08-05 to 2026-08-05

Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.americanexpress.ch/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: sameorigin
permissions-policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self), xr-spatial-tracking=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.swisscard.ch tag.swisscard.ch www.google.de google.de www.google.com google.com analytics.google.com adservice.google.com www.google.ch google.ch google-analytics.com www.google-analytics.com *.googletagmanager.com *.googletagservices.com googletagservices.com tag.myaspectra.ch log.xiti.com logs1412.xiti.com tag.aticdn.net cdn.exactag.com m.exactag.com fghvnms.pa-cd.com vimeo.com player.vimeo.com f.vimeocdn.com i.vimeocdn.com use.typekit.net p.typekit.net performance.typekit.net *.doubleclick.net fonts.gstatic.com fonts.googleapis.com www.googleadservices.com https://bat.bing.com https://c.bing.com https://bat.bing.net webservice.cybwell.ch *.googlesyndication.com connect.facebook.net www.facebook.com facebook.com my2.siteimprove.com id.siteimprove.com sso2.siteimprove.com d.nativendo.de c.nativendo.de t2.nativendo.de cdn.adtelligence.de swisscard-service.adtelligence.de swisscard-tracking.adtelligence.de testcdn.adtellige
strict-transport-security: max-age=31536000; includeSubDomains