bvk.ch

HTML metadata

Title

Ihre Pensionskasse - BVK

Description

Die BVK ist die Pensionskasse an Ihrer Seite. Profitieren auch Sie von den zuverlässigen Angeboten.

Language

de-CH

Generator

TYPO3 CMS

Canonical

https://bvk.ch/de/

Translations

de
en

Technology

Server: Apache
jQuery: 3.6.0

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (5)

privacy-proxy.usercentrics.eu×3
app.usercentrics.eu×1
px.ads.linkedin.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

dns1.ewdns.ch
dns2.ewdns.ch
dns3.ewdns.ch

MX

10 bvk-ch.mail.protection.outlook.com

TXT

Show 5 TXT records

_ddbjkow1ttxk5670bqq9dhq5xl7ihs4
atlassian-sending-domain-verification=c35f6780-3772-41d5-9c2f-1cf42e6f74b1
_lyx7mtr2qy0199uw5mdc3vqfenhpy0t
Foxit-domain-verification=75746e20732b0abfe65da1c6dc20fcd8
ZA=5OVdGLGH0pfDCFDoKRtXkg==

Verified for

Atlassian
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:217.71.92.79 ip4:217.71.92.17 ip4:62.2.176.70 ip4:81.18.19.26 ip4:185.5.58.144/29 include:_spf.atlassian.net include:spf.etermin.net include:spf.protection.outlook.com include:_spf.ewmail.com include:spf.mandrillapp.com include:customers.clickdimensions.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@wsncke3e.uriports.com; ruf=mailto:dmarc@wsncke3e.uriports.com; pct=100;

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjCZexCWsUknFqzWgrfbrFx1g+WPBJxNNpL3ZQcAqbHLy9YbDd+RdWZpk/VCkqaMHc3jUF…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo1/cFhixwNX7WTd31peWKZiYO6M9Y79X9Y7sFGzhjjqCYB3Sk2Uvwi7oYWOWmxramat8hTO969jog…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-03-09 to 2026-08-15

Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://bvk.ch/de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-7Q1ecbYBD9dyIMd-YUI2bwMYpHewSA-6qoV-XsGnAbVcV53FnZpX6Q' data: https://*.openstreetmap.org 'sha256-v+TbX/6TEW7ZOrlKbOvP/2HJuyauEmIe8W59qgiAYME=' analytics-eu.clickdimensions.com www.etermin.net connect.facebook.net 'sha256-BqgY78JoqBmFTamLBh6m31kIcdkQ0qohhMbD2jJi6Ds=' 'sha256-Krt4d2xAntqcUTfVg96uPt5BiTYD4T0AG0JfvWG4rkI=' https://googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com 'sha256-rDdoTzm8KRo1qRnsqmDVDQD2RNPkuXSO5qT+XNaE7/Q=' 'sha256-xlxj3ynWi2bmhhZwsmhL0WeCRf0q5DQMmmKkBkHmqZc=' 'sha256-xXP4OST8QWx+n16ECCUZQMcyiM+Khm2zw7f6vBJMlIo=' 'sha256-6GpKJZvgZgOu2vydhu04Pt4AXCVjfHlHAzMuOwTXy8I=' maps.googleapis.com *.linkedin.com snap.licdn.com 'sha256-6+ZoiocpOe/4xKoH65luzUxa1VfoezVXLnIPUg8leEE=' *.usercentrics.eu 'unsafe-eval' 'sha256-RQ1MExlHBmunR04SNsMJt5atCxUtI5iuLnJuzPXxLvg=' api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userli
strict-transport-security: max-age=31536000