vedag.ch

HTML metadata

Technology

Server

nginx

jQuery

2.1.3 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (1)

• www.googletagmanager.com×1

DNS records live

NS

• ns1.madlan.ch
• ns2.madlan.ch

MX

• 10 vedag-ch.mail.protection.outlook.com

Verified for

• Microsoft 365

Email authentication partial

SPF

v=spf1 mx include:spf.madlan.ch include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.vedag.ch/

present

• strict-transport-security
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• missing Content Security Policy
• weak content type protection
• missing Permissions Policy

Links to (22)

• smsr.ch×1
• politikundpatient.ch×1
• patientenapotheke.ch×1
• omct.ch×1
• medges.ch×1
• madlab.ch×1
• gaeso.ch×1
• fmh.ch×1
• doi.org×1
• bullmed.ch×1
• buendneraerzteverein.ch×1
• berner-aerzte.ch×1
• appaerzte.ch×1
• agzg.ch×1
• aerzte-zs.ch×1
• aerzte-zh.ch×1
• aerzte-tg.ch×1
• aerzte-sg.ch×1
• aerzte-schaffhausen.ch×1
• aerzte-gl.ch×1
• aerzte-bl.ch×1
• aargauer-aerzte.ch×1

Linked from (1)

• aerzte-und-patienten.ch×1