eoc.ch

HTML metadata

Title

Ente Ospedaliero Cantonale | EOC

Description

L’Ente Ospedaliero Cantonale (EOC) riveste un ruolo centrale nel panorama sanitario svizzero: si occupa della gestione degli ospedali pubblici in Ticino per assicurare ai cittadini le strutture stazionarie ed i servizi medici necessari.

Language

it

Canonical

https://www.eoc.ch/

Translations

en
it

Open Graph

url: https://www.eoc.ch/
title: Ente Ospedaliero Cantonale | EOC
site name: eoc

Technology

CDN: Cloudflare
jQuery: 3.6.0
Stack: Java

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×2
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

harvey.ns.cloudflare.com
lia.ns.cloudflare.com

MX

10 eocmx03.eoc.ch
5 eocmx04.eoc.ch

TXT

dl80lpkqq8bf239k2lqdogpnt7
yjs8jb42gs047y8t62ywgc6m4vv1ygcs

Verified for

Google
Microsoft 365
Zoom

Email authentication partial

SPF: v=spf1 mx a include:CustSPF.tinext.com include:spf.umantis.com include:hin.ch include:spf.protection.outlook.com ip4:199.187.172.0/22 ip4:199.244.72.0/22 ip4:185.228.36.0/22 -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:4df67ad2257a4270bc76a7eb5b31a232@dmarc-reports.cloudflare.net
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-16 to 2026-07-15

Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.eoc.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), camera=(self), microphone=(self), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com data:; media-src 'self' https://eochat.eoc.ch; connect-src 'self' https://cdn.cookielaw.org *.google-analytics.com https://geolocation.onetrust.com *.googleapis.com *.analytics.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com https://privacyportal-de.onetrust.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com *.googleapis.com https://eochat.eoc.ch https://modal.eochat.eoc.ch https://cdn.cookielaw.org https://www.googletagmanager.com https://maps.google.com *.google-analytics.com https://www.youtube.com https://code.jquery.com *.hotjar.io *.hotjar.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' *.googleapis.com https://www.googletagmanager.com https://code.jquery.com https://www.gstatic.com; img-src 'self' https://cdn.cookielaw.org *.gstatic.com *.googleapis.com https://www.googletagmanager.com *.google.ch *.google.it *.google.com https://modal.eochat.eoc.ch https://eochat.eoc.ch/
strict-transport-security: max-age=31536000; includeSubDomains;