thepassage.ch

.ch crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 2985 ms crawled 2026-05-18

FR · 88.218.34.28 · AS16276 OVH SAS

Reputation 100/100

Classifying

HTML metadata

Title

→ The Passage · 4 sterne Hotel in Basel, Schweiz

Description

The Passage ‎· 4 Sterne Hotel im Bazel, in der Schweiz. Zum Basel ein Designhotel zu finden, mit Konferenzraum , Fitnessraum, Wäscheservice.

Language

Canonical

https://www.thepassage.ch/de/

Translations

Technology

Social widgets

YouTube Embed

Third-party hosts loaded (2)

www.hotelpricexplorer.com×1
www.youtube.com×1

Social

Contact

Email

Phone

+41616315151

DNS records live

NS

dns.apicius.com
dns2.apicius.com
dns3.apicius.com
dns4.apicius.com

MX

0 thepassage-ch.mail.protection.outlook.com

TXT

MS=ms28505883

Email authentication strong

SPF

v=spf1 include:spf_external.api-and-you.com include:spf_external.api-and-you.com include:spf.protection.outlook.com include:spf.reservit.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@apicius.com; ruf=mailto:dmarc@apicius.com

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJcRvvFjD5ZDbGafKDDCwM9yW6f5WzJvSm7DGvtLSD7iiPsIMLWJvMfHX9+Rwqz/8KSpmfV38Vwjpq…

selectors probed

Certificate (current)

R13

from 2026-05-17 to 2026-08-15

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.thepassage.ch/de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src *;font-src * data:;img-src * data:; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' *; frame-src *
strict-transport-security: max-age=31536000