vita.ch

HTML metadata

Title

Occupational retirement provision for companies | Vita

Description

What is Vita? An occupational retirement provision for companies offered by Vita Joint Foundations and Zurich Insurance. Simple, understandable and secure.

Language

en

Canonical

https://www.vita.ch/en/startseite

Translations

de
en
fr
it

Open Graph

url: https://www.vita.ch/en/startseite
title: Occupational retirement provision for companies
description: What is Vita? An occupational retirement provision for companies offered by Vita Joint Foundations and Zurich Insurance. Simple, understandable and secure.

Technology

Stack: ASP.NET

Social

Contact

Phone

0800 80 80 80

DNS records live

NS

ns140.a1.incapsecuredns.net
ns162.a0.incapsecuredns.net

MX

10 mxa-002e5d02.gslb.pphosted.com
10 mxb-002e5d02.gslb.pphosted.com

TXT

Show 10 TXT records

linkedin-site-verification=d05985fd-cdde-4f5d-b8dd-880354620bc4
_5lfmaigtqvah2zgj0ewv2384rjfx5e4
f4d4eb4e4a1d4781a329c87a74391f31
2hPk/7jDYgjXnsYYXzQfjUvSEeVCfDnkf+tdTso+eZ+g/4Jg4r5NwsVbAOXoraLhG7bDlis/+ro4pS86SrRwqw==
6e354087aadf43acbea1458fad70cc82domain.billing@zurich.com
5y0c4mwshj1qdl1cdcqfvtk3vl5b00d8
n2clhg60bmnsfhflcnl2ncg36lyxnsb3
e4b4e4d1ca41449ea33348fc389a196d
_5ngbe2wvv7yjxostsrh2n1qvrw6dtog
6spzsxf3dg9xfsqk23kt37y1nz4243k2

Verified for

Atlassian
GlobalSign
Microsoft 365
OneTrust

Email authentication strong

SPF: v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

GlobalSign Atlas R46 DV TLS CA 2026 Q2

from 2026-05-28 to 2026-08-26

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.vita.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: microphone=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' 'self' chrome-extension https: wss:; img-src https: data: blob:; object-src 'none'; frame-ancestors *.zurich.ch *.autosense.ch 'self'; worker-src blob:;
strict-transport-security: max-age=31536000;