swiss-running.ch

HTML metadata

Title

Home | Swiss Running

Language

de-CH

Generator

TYPO3 CMS

Canonical

https://www.swiss-running.ch/

Translations

de
fr

Open Graph

title: Home
site name: Swiss Running

Technology

Server: Apache

Analytics

Google Tag Manager

Ads

Google AdSense
Google Ads (DoubleClick)

Fonts

Adobe Fonts

Third-party hosts loaded (5)

pagead2.googlesyndication.com×1
platform.contentfry.com×1
securepubads.g.doubleclick.net×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

+41 31 359 73 00

DNS records live

NS

ns1.bdm.microsoftonline.com
ns2.bdm.microsoftonline.com
ns3.bdm.microsoftonline.com
ns4.bdm.microsoftonline.com

MX

0 swissrunning-ch01c.mail.protection.outlook.com

TXT

mscid=FVwOEo0grVgwq2HwIh6OGGEc+O8+lpge3VSeCumpbhXxQfhteosVHdvLi4ANPf6irjrzfAMsNVhGSWPBVsXm6Q==

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:sendgrid.net a:smtp.pub.begasoft.ch a:nl.swiss-athletics.ch a:mail2.enewsletter.ch ip4:188.138.81.139 ip4:91.208.173.122 -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCZrRRBDJgnU0sIpgPzocXDrPPHFvl/OhkhMtRYIeNuulzBUvzUcl7W/PW3eusajruTCTnawthIc5Xma7g0jm…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui4BbzzZzen+1DsmbUOXoVZh22BCeVkvAeyy8CKdbK3asdTx9qe60WXREAadqoRD/XsJHVt2l6Msjv1ao0…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dbzxAH+yR/Nfp24SJLbZEPRIWhB9ifII5NKbiOx1HL6aVUKgP7a0TPGQ+FSYdU85j4T5vWqK5VoxW1Ido…

selectors probed

Certificate (current)

R13

from 2026-04-15 to 2026-07-14

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.swiss-running.ch/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: deny
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=*, battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=*, geolocation=*, gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=31536000; includeSubDomains