mobility.ch

HTML metadata

Title: Car subscription from Mobility - more than carsharing | Mobility
Description: Discover carsharing from Mobility. Digital, spontaneous and always close to you. ✔ No maintenance ✔ No stress ✔ Various vehicles ➜ Test now
Language: en-US
Canonical: https://mobility.ch/en

Open Graph

url: https://mobility.ch/en
title: Car subscription from Mobility - more than carsharing | Mobility
description: Discover carsharing from Mobility. Digital, spontaneous and always close to you. ✔ No maintenance ✔ No stress ✔ Various vehicles ➜ Test now

Technology

Server: Apache
CMS: Nuxt

Cookie consent

Cookiebot

Third-party hosts loaded (2)

consent.cookiebot.com×2
dev.visualwebsiteoptimizer.com×1

Social

Contact

Phone

+41 848 824 812

DNS records live

NS

ns1.ip-plus.net
ns2.ip-plus.net

MX

10 mobility-ch.gate.seppmail.cloud

TXT

Show 5 TXT records

T753VJoTPa4G4tlCi1KJIOPinNg4Ge4QUVP87G4Bc9c=
g3flHWgLGVX9uWBGJ6ovagE/wl+HITiGSt2uZ8S6t5jdLH87sGOyzJ5WaA0d5GT5IiM24wVVp7pZ2B7aDxhUIw==
swisssign-check=wWGvTHCGLzWnVevaf7Tea4A1NZZe3jTDJjJqecsVdL
Auth-Code:6Z5EwYUvU+4ejfkElA2I9gT18Nce+2qHTICPTtWTL04=
swisssign-check=ZAAwnkCQ0sXMMqSLN67Zu5P9mfUErin5pq6LQvkbft

Verified for

Atlassian
GlobalSign
Google
Microsoft 365

Email authentication partial

SPF: v=spf1 include:_s00017085.autospf.email ~all
softfail (~all)
DMARC: v=DMARC1;p=none
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

GlobalSign GCC R3 DV TLS CA 2020

from 2026-04-28 to 2026-11-13

Expires in 165 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://mobility.ch/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), geolocation=(self), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self' https:; frame-ancestors 'self' https://app.storyblok.com/ https://my.mobility.ch https://testmy.mobility.ch/; img-src 'self' data: https:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googlevideo.com https: blob: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-src 'self' https: 'unsafe-inline'; worker-src 'self' https: blob:;
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-origin