Skip to main content

Is kvz-moodle2.ch a Scam? Security Check Results - kv zürich Reviews

kvz-moodle2.ch favicon

Is kvz-moodle2.ch Safe? Security Analysis for kv zürich

https://kvz-moodle2.ch

Check if kvz-moodle2.ch is a scam or legitimate. Free security scan and reviews.

EducationSwitzerlandmedium
Microsoft Azure Active DirectoryOAuth2OpenID ConnectJavaScriptKnockout.js
Analyzed 10/4/2025Completed 5:30:08 AM
68
Security Score
MEDIUM RISK

AI Summary

The analyzed website is a Microsoft Azure Active Directory login portal for the kvzschulech.onmicrosoft.com tenant, serving the educational institution 'kv zürich' in Switzerland. It facilitates secure user authentication for access to services such as the kvz-moodle2.ch learning platform. The site leverages Microsoft's identity platform technologies, including OAuth2 and OpenID Connect, ensuring robust security and compliance with privacy standards. The presence of official Microsoft privacy and terms of service links further reinforces trustworthiness. From a technical perspective, the site is hosted on Microsoft Azure infrastructure, utilizing modern JavaScript frameworks and secure authentication flows. Performance and mobile optimization are good, with accessibility features implemented. Security headers and HTTPS enforcement are in place, contributing to a strong security posture. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure aligned with enterprise-grade security practices. The lack of direct contact information on the login page is typical for such portals, with user support likely managed through the parent educational organization. The domain is a Microsoft-managed subdomain, consistent with the service provided, and no WHOIS data is available for the subdomain, which is expected. The risk assessment is low, with no critical issues identified. Strategic recommendations include maintaining up-to-date security libraries, conducting regular security audits, and monitoring for phishing attempts targeting the login portal to ensure continued protection of user credentials and data.

Detected Technologies

Microsoft Azure Active DirectoryOAuth2OpenID ConnectJavaScriptKnockout.js

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The business behind the website is an educational institution operating under the name 'kv zürich', providing digital learning services through platforms like Moodle. Their market positioning is niche, focusing on education in Switzerland, leveraging Microsoft cloud services for identity and access management. The business model centers on delivering educational content and user authentication services securely and efficiently. The partnership ecosystem includes Microsoft as a critical technology provider. Growth indicators are not directly observable from the login portal but the use of enterprise-grade Microsoft services suggests a stable operational environment.

Security Posture Analysis

Comprehensive Security Assessment

The security posture of the website is strong, leveraging Microsoft's Azure AD platform with OAuth2 authorization code flow, nonce, and state parameters to prevent CSRF and replay attacks. HTTPS is enforced with strong SSL/TLS configurations. Security headers such as Content-Security-Policy, X-Frame-Options, and Strict-Transport-Security are present, enhancing protection against common web attacks. No exposed sensitive data or vulnerable libraries were detected. The site uses telemetry for monitoring but respects privacy compliance. Incident response and vulnerability disclosure information are not publicly available on the login page, which is typical for such services but could be improved by providing dedicated security contact channels.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement and publicize a dedicated security incident response contact or page for transparency.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

kv zürich

Description:

The website is a Microsoft Azure AD login portal for kvzschulech.onmicrosoft.com, used for authentication to services such as kvz-moodle2.ch. It serves an educational institution or organization named 'kv zürich'.

Key Services:
User authenticationAccess to Moodle learning platform
Content Quality:

basic

Branding:

consistent

Technical Stack

Technologies:
Microsoft Azure Active DirectoryOAuth2OpenID ConnectJavaScriptKnockout.js
Frameworks:
Microsoft Identity Platform
Platforms:
Microsoft Online Services
Performance:

fast

Mobile:

good

Accessibility:

good

SEO:

basic

Security Assessment

Security Score:
90/100
Best Practices:
  • HTTPS enforced
  • OAuth2 authorization code flow
  • Nonce and state parameters used
  • CSRF protection tokens present

Analytics & Tracking

Services:
Microsoft OneCollector
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:basic
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is a Microsoft Azure AD login page for kvzschulech.onmicrosoft.com tenant.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

70/100
Score

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Weak X-XSS-Protection configuration

LOW

Current value: "0"

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

65/100
Score

Complex SPF record

LOW

Too many include statements can cause lookup limits

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 ip4:216.32.180.228 include:spfa.microsoftonline.com include:spf-exacttarget.microsoftonline.com include:spf-msods.microsoftonline.com include:spf-mfa.microsoftonline.com include:_spf-ssg-a.microsoft.com -all
DNS Lookups:5/10
Policy:-all
DMARC Details
Policy:reject
Aggregate Reports:rua@dmarc.microsoft
Forensic Reports:ruf@dmarc.microsoft

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

100/100
Score

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:stamp2.login.microsoftonline.com
Issuer:DigiCert SHA2 Secure Server CA
Valid Until:3/20/2026 (167 days)
SANs:stamp2.login.microsoftonline.com, login.microsoftonline-int.com, login.microsoftonline-p.com +6 more

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

60/100
Score

DNS Resolution Failed

CRITICAL

Unable to resolve domain A records

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

Domain Registration Details

Domain Age
23 years(mature)
Expiry Risk
low(278 days)
Protection Level
strongDNSSEC OFF

DNS Records

Name Servers:
ns1-38.azure-dns.com
ns2-38.azure-dns.net
ns3-38.azure-dns.org
ns4-38.azure-dns.info
MX Records:
0: mail.global.frontbridge.com
SOA:Serial: 2017971531, TTL: 60s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:25ms

SPF Analysis

SPF Record:
v=spf1 ip4:216.32.180.228 include:spfa.microsoftonline.com include:spf-exacttarget.microsoftonline.com include:spf-msods.microsoftonline.com include:spf-mfa.microsoftonline.com include:_spf-ssg-a.microsoft.com -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on Microsoft Azure Active Directory infrastructure, using OAuth2 and OpenID Connect protocols for authentication. It employs modern JavaScript frameworks and libraries, including Knockout.js, and loads resources from Microsoft CDN domains. The hosting provider is Microsoft Azure, ensuring high availability and performance. The site is mobile optimized and accessible, with proper meta tags and SEO basics in place. No CMS is detected as this is a specialized login portal. The technical implementation aligns with enterprise standards, minimizing technical debt and risks.
⭐ Verified Community Reviews

What others say about kvz-moodle2.ch

Share your experience to help others make informed decisions. We verify every review by email and publish it once our moderation team approves it.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

out of 5

0 reviews published

Loading reviews…

How did we do?

Your feedback directly shapes our roadmap. Rate the quality of this report, leave an optional comment, and let us know if you want our security specialists to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.

Analyze Another Website