careum.ch

HTML metadata

Title

Fit für die Gesundheitswelt | Careum

Description

Mit praxisrelevanter Bildung, Forschung und Vernetzung stärkt und befähigt Careum Menschen und Organisationen in ihrem Einsatz für unsere Gesundheit.

Language

de-DE

Translations

de
en
fr
it

Open Graph

url: /home
title: Für die Gesundheitswelt
site name: Careum
description: Careum bildet, forscht und vernetzt. Wir unterstützen Entwicklungen in der Gesundheitswelt und fördern dazu die Bildung im Gesundheits- und Sozialwesen.

Technology

CMS: Nuxt

Third-party hosts loaded (1)

cdn-cookieyes.com×1

Social

DNS records live

NS

ns1-33.azure-dns.com
ns2-33.azure-dns.net
ns3-33.azure-dns.org
ns4-33.azure-dns.info

MX

10 careum-ch.mail.protection.outlook.com

Verified for

Atlassian

Email authentication strong

SPF

v=spf1 a a:mail01.refline.ch a:mail02.refline.ch include:spf.protection.outlook.com include:_cmspf.cleanmail.ch include:_spf.careum.ch include:_spf.zimpel.de ip4:217.150.245.137 ip4:195.176.3.123 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@careum.ch; ruf=mailto:dmarc@careum.ch; sp=quarantine

policy: quarantine · sp=quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWaRHIGG/Ch0MAHcF3DS6Io1xEXWCUnlUU1NK6x7KJ2PqtuZrpsHlsEg+UxeCzJyJ470Wj4TpctJbx…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4etOuMnhSkOLGw618n7HYmOTNUp3VRs794tR5grN1aXoaEGcoeFm5/YsxTFUMZaxHpH28EFtvL3y2PAJtY…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLuXXwCsNnncH8Tr4ZZK25uwa/IPPUf4Sqyviy8hRKUq2FrFlR1tDIxzVWz7H+vld2M87lFmZxInRVW/e9…

selectors probed

Certificate (current)

R13

from 2026-04-13 to 2026-07-12

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://careum.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(self), microphone=(self)
x-content-type-options: nosniff
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'
strict-transport-security: max-age=31536000; includeSubDomains; preload