zugerkb.ch

HTML metadata

Title: Zuger Kantonalbank - die führende Bank in Zug
Description: Die Zuger Kantonalbank ist die führende Bank in der Wirtschaftsregion Zug. Konto, Karten, Kreditkarten, TWINT, Anlegen, Börse, Hypotheken, Vorsorgen
Language: de
Generator: Sitefinity 15.4.8622.0 DX
Canonical: https://www.zugerkb.ch

Open Graph

url: https://www.zugerkb.ch/
title: Zuger Kantonalbank
locale: de_DE
description: Die führende Bank in der Wirtschaftsregion Zug.

Technology

Server: Apache

Cookie consent

OneTrust

Third-party hosts loaded (2)

cdn.cookielaw.org×2
chat.aiaibot.com×1

Social

DNS records live

NS

ns1.glipac.ch
ns2.glipac.ch
ns3.glipac.ch
ns76.irondns.net
ns78.irondns.net

MX

10 mail.zugerkb.ch
20 mail2.zugerkb.ch

TXT

Show 5 TXT records

7376C272-6994-4F5B-B643-AADA0CED29A5
swisssign-check=XS4b34-700ihM-UnSdUq1IP3R1o
MS=AE79910D36ED45FE7240C65777AECB3789F0D3E9
O/sNMKa4MzrnsX2Tc1312j6qUoYMu04kMKTLkUtSpobVcHb9uQf+wXY2VjJe1ookB3S2Dwh+o0wKYfUlUEy/KA==
swisssign-check=ubUrxmWDTccwLAzM2g__XHzIgFc

Verified for

Apple
Atlassian
Cisco
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:194.176.104.218 ip4:194.176.104.219 include:spf.swisscom.com include:myr.is include:_spf.psm.knowbe4.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc-reports@zugerkb.ch; ruf=mailto:dmarc-forensic@zugerkb.ch; fo=1

policy: none (monitoring only)

DKIM

dkim: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprSPrbmAj53js6UUlNxRt7XcTrhyJcUPlyjgJyP9Ee99ygK6yybFqJMI4KKgEkrX0tS5tUPngswXPJ…

selectors probed

Certificate (current)

SwissSign RSA TLS OV ICA 2022 - 1

from 2025-08-14 to 2026-08-14

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.zugerkb.ch/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://www.youtube.com https://chat.aiaibot.com https://chat-pr823.aiaibot.dev https://cdn.jsdelivr.net/npm/promise-polyfill@8/dist/polyfill.min.js https://e.issuu.com https://graph.facebook.com https://maps.google.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/jsapi https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.gstatic.com https://s7.addthis.com https://m.addthis.com https://z.moatads.com/addthismoatframe568911941483/moatframe.js https://v1.addthisedge.com https://service.newhome.ch/v1/ortschaften/suche https://siteimproveanalytics.com/js/siteanalyze_6012616.js https://www.riddle.com/files/js/embed.js https://swisspost.opendatasoft.com https://connect.facebook.net https://snap.licdn.com https://goo.gl/xX8pDD https://*.opentok.com https://*.tokbox.com https://unblu.cloud https://zgkbv.unblu.cloud https://zgkbv.acp.unblu-env.com https://www.
strict-transport-security: max-age=31536000; includeSubDomains