spitalzollikerberg.ch

HTML metadata

Title

Spital Zollikerberg

Description

Als Regionalspital in Zürich mit einem öffentlichen Leistungsauftrag bieten wir Ihnen eine umfassende medizinische Grundversorgung an. Lernen Sie uns kennen.

Language

de

Canonical

https://spitalzollikerberg.ch/de

Translations

de
en

Open Graph

title: Spital Zollikerberg
description: Als Regionalspital in Zürich mit einem öffentlichen Leistungsauftrag bieten wir Ihnen eine umfassende medizinische Grundversorgung an. Lernen Sie uns kennen.

Technology

CDN: Vercel
CMS: Next.js

Cookie consent

Cookiebot

Third-party hosts loaded (1)

consent.cookiebot.com×1

Social

Contact

Email

info@spitalzollikerberg.ch

Phone

Address

Trichtenhauserstrasse 20, 8125, Zollikerberg, CH

DNS records live

NS

ns5.nine.ch
ns6.nine.ch

MX

10 mx10.spitalzollikerberg.ch

TXT

Show 5 TXT records

_4ncwiivx8rr6a23gzdb7nldvzmueizl
_t1vqw42bxrswzfx4hqcbhvxvkkz5ua1
_7n09hynk967t7zv8pcm0z8wer4hdw9t
@=MS=005D09F4FC7164A4CAAA1BD2C8049B93EBE86606
xh8d7ztq1d6144ss1tjj9wl5b97cn8x3

Verified for

Adobe
Apple
Atlassian
Brevo
Google
Miro

Email authentication partial

SPF: v=spf1 mx ip4:81.7.234.241 ip4:62.55.182.68 include:spf.sendinblue.com include:spf.protection.outlook.com include:spf.crsend.com include:_spfip.aspectra.com include:hin.ch ~all
softfail (~all)
DMARC: v=DMARC1; p=none; sp=none; pct=100; adkim=s; aspf=s; rua=mailto:122d7f1d@in.mailhardener.com
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-16 to 2026-07-15

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://spitalzollikerberg.ch/de

present

strict-transport-security
content-security-policy
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection
missing Referrer Policy

Header values

permissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://va.vercel-scripts.com https://vercel.live https://cdn.friendlyanalytics.io https://app.friendlyanalytics.ch https://www.googleadservices.com https://www.google-analytics.com https://d18wbssj9sd0zj.cloudfront.net https://mytools.aleno.me https://www.googletagmanager.com https://www.youtube.com https://vimeo.com https://player.vimeo.com https://challenges.cloudflare.com https://maps.googleapis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com https://d18wbssj9sd0zj.cloudfront.net https://mytools.aleno.me 'unsafe-inline'; img-src 'self' blob: data: https://vercel.com https://vercel.live https://app.friendlyanalytics.ch https://imgsct.cookiebot.com https://googleads.g.doubleclick.net https://www.google.ch https://www.google.com https://google.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://i.vimeocdn.co
strict-transport-security: max-age=31536000; includeSubDomains; preload