dtswiss.com
FDT Swiss: manufacturer of bicycle components | DT Swiss
We develop high-end, lightweight bicycle wheels, forks and shocks which are known for their precision and durability.
Last scanned 43 min agoCompare with another site →
Built with
- Backend
- PHP
Also detected
- Infrastructure
- Nginx
- Third-party services
- Cookiebot · Facebook Pixel · Google Tag Manager · Microsoft Clarity
Overview
- Status
- alive
- Registered
- 1996-09-09 (30 years ago)
- First seen here
- 2026-09-22
- Security grade
- F (40/100, from headers & TLS)
- Privacy score
- 60/100 (2 third-party script hosts, 4 tracking/marketing services)
- Hosting
- Swisscom (Schweiz) AG · AS3303 · Switzerland
- Server header
nginx- Response time
- 75 ms to first byte, measured from our crawler
- TLS certificate
- Let's Encrypt · TLSv1.3 · expires 2026-10-28
- Language
- en
- Mobile-ready
- yes (viewport meta tag)
- Linked to from
- 5 other sites seen so far
Loads scripts from
Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.
What to fix
- Add Strict-Transport-Security
Header: Strict-Transport-Security: max-age=31536000; includeSubDomains - Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test. - Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff - Prevent clickjacking
Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive). - Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin
Security & email signals
- ✓ HTTPS
- ✗ HSTS
- ✗ Content-Security-Policy
- ✗ X-Content-Type-Options
- ✗ X-Frame-Options
- ✗ Referrer-Policy
- ✗ Permissions-Policy
- ✓ SPF record
- ✓ DMARC record
- ✗ DKIM record
- ✓ Cookies set securely
- ✓ Has real content (not an empty shell)
- ✓ Valid TLS certificate
Badge
Show this site's security grade in a README or footer:
<a href="https://webtelemetry.dev/site/dtswiss.com"><img src="https://webtelemetry.dev/badge/dtswiss.com.svg" alt="Security grade"></a>
Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.