pat-bvg.ch

HTML metadata

Title

PAT BVG - Ihre Pensionskasse für medizinische Berufe: PAT BVG

Description

PAT BVG - Die verlässliche Pensionskasse für Ihre berufliche Vorsorge. Seit 1984 führend in der Medizinbranche.

Language

de-CH

Generator

TYPO3 CMS

Canonical

https://www.pat-bvg.ch/

Translations

de
fr
it

Open Graph

title: PAT BVG
site name: PAT BVG
description: PAT BVG - Die verlässliche Pensionskasse für Ihre berufliche Vorsorge. Seit 1984 führend in der Medizinbranche.

Technology

Server: Apache
jQuery: 3.6.0

Social

Contact

Phone

DNS records live

NS

cns1.cloudpit.de
cns2.cloudpit.com
cns3.cloudpit.io

MX

0 spa01.netrics.ch

TXT

oqvgv032gnlsg4s79c28uba30b
asap-site-verification-6b952df7-00a8-4f86-b0e2-33b11afb67e2
swisssign-check=TbVmGUWe7s0VFIzpjCbBdQVKk0M

Verified for

Cisco
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx ip4:212.98.54.170 include:spf.mail.netrics.ch include:server101.hostfactory.ch -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; aspf=r; adkim=r; rua=mailto:edv@pat-bvg.ch

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqKVdrr+9+r1QxxujBNXPt8IxVG6oUt6nLjvdqPQtX1WPbYmkv55TVRXLG1eFeRK0JlujI…

selectors probed

Certificate (current)

R13

from 2026-04-27 to 2026-07-26

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.pat-bvg.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://www.google.com" "https://maps.google.com"), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'none'; img-src 'self' data: *.googletagmanager.com *.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com https://www.googletagmanager.com https://chat.aiaibot.com https://unpkg.com; connect-src 'self' *.google-analytics.com *.aiaibot.com https://cdn.plyr.io; frame-src 'self' https://chat.aiaibot.com https://www.homegate.ch https://www.youtube-nocookie.com; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests
strict-transport-security: max-age=2592000