bankm.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2581 ms crawled 2026-05-19

DE · 134.119.0.78 · AS34011 Host Europe GmbH

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title

BankM – Das Hausbankprinzip für den Kapitalmarkt.

Description

Börsengang, IPO, Unternehmensanleihen, Kapitalerhöhung, Kapitalmaßnahmen, Designated Sponsoring, Research, Roadshows, BankM

Language

de-DE

Generator

WordPress 6.9.4

Canonical

https://www.bankm.de/

Translations

Feeds

Technology

Server: nginx
CMS: WordPress

Third-party hosts loaded (3)

ccm.oodev.de×1
cdn.brevo.com×1
cdn.by.wonderpush.com×1

Social

Contact

Email

info@bankm.de

Phone

+496971918380

Registration

Updated

2026-01-05

Name servers

helium.ns.hetzner.de.
hydrogen.ns.hetzner.com.
oxygen.ns.hetzner.com.

DNS records live

NS

helium.ns.hetzner.de
hydrogen.ns.hetzner.com
oxygen.ns.hetzner.com

MX

10 mx01.hornetsecurity.com
20 mx02.hornetsecurity.com
30 mx03.hornetsecurity.com
40 mx04.hornetsecurity.com

Verified for

Brevo
Microsoft 365

Email authentication weak

SPF

v=spf1 mx ip4:92.208.106.214 include:spf.protection.outlook.com include:spf.hornetsecurity.com ~all

softfail (~all)

DMARC

not published

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2025-07-21 to 2026-08-18

Expires in 90 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.bankm.de/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")