rehaklinik-tschugg.ch

HTML metadata

Title

Klinik für Epilepsie & Neurorehabilitation | Rehaklinik Tschugg

Description

Willkommen in der Rehaklinik Tschugg. Wir sind eine Spezialklinik für Neurorehabilitation und Bewegungsstörungen, mit Parkinson-Zentrum und Epileptologie.

Language

de

Canonical

https://www.rehaklinik-tschugg.ch/

Translations

de
fr

Open Graph

title: Klinik für Epilepsie & Neurorehabilitation | Rehaklinik Tschugg
locale: de-DE
site name: Rehaklinik Tschugg
description: Willkommen in der Rehaklinik Tschugg. Wir sind eine Spezialklinik für Neurorehabilitation und Bewegungsstörungen, mit Parkinson-Zentrum und Epileptologie.

Technology

Server: web
jQuery: 3.7.1

Analytics

Google Tag Manager

Third-party hosts loaded (4)

maps.googleapis.com×1
webcachex-eu.datareporter.eu×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

+41 32 338 44 44202

DNS records live

NS

ns.hostpoint.ch
ns2.hostpoint.ch
ns3.hostpoint.ch

MX

10 rehakliniktschugg-ch02e.mail.protection.outlook.com

TXT

v=DMARC1;p=none;

Verified for

Google

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com mx:hin.ch -all

strict (-all)

DMARC

not published

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-04-17 to 2026-07-16

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.rehaklinik-tschugg.ch/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' https://api.userback.io/ https://maps.googleapis.com/ https://stats.vamed.de/ https://swarmcrawler.datareporter.eu/ https://www.google.com/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; font-src 'self' data: https://static.userback.io/ https://cdn.priv.center/ https://fonts.gstatic.com https://use.typekit.net; frame-ancestors 'self' https://vimeo.com/ https://*.jobbern.ch/; frame-src 'self' https://www.google.com/ https://vimeo.com/ https://player.vimeo.com/ https://vamed-ag-ch.onlyfy.jobs/ https://vitrea-gesundheit.onlyfy.jobs/ https://www.youtube.com/ https://my.matterport.com/ https://*.jobbern.ch/; img-src 'self' data: https://maps.googleapis.com/ https://maps.gstatic.com/ https://www.facebook.com/tr/ https://www.facebook.com/privacy_sandbox/pixel/register/trigger/; script-src 'self' 'unsafe-inline' https://code.jquery.com/ https://static.userback.io/ https://maps.googleapis.com/ https://www.goo
strict-transport-security: max-age=5184000; includeSubDomains; preload