indexo.dev

bkk-bba.de

.de crawl

First seen 2026-05-02 · Last seen 2026-05-15 · ok HTTP/1.1 200 1660 ms crawled 2026-05-09

DE · 188.40.3.67 · AS24940 Hetzner Online GmbH

Reputation 100/100

sector health type homepage

HTML metadata

Title
BKK B. Braun Aesculap
Description
Die Betriebskrankenkasse exklusiv für Mitarbeiter der B. Braun Melsungen AG und Aesculap AG sowie deren Familien ✓ umfangreiche Extraleistungen ✓ persönliche Beratung ✓ vor Ort in Melsungen & Tuttlingen
Language
de
Generator
TYPO3 CMS
Canonical
https://www.bkk-bba.de/

Open Graph

title
BKK B.Braun Aesculap
description
Die Betriebskrankenkasse exklusiv für Mitarbeiter der B. Braun Melsungen AG und Aesculap AG sowie deren Familien ✓ umfangreiche Extraleistungen ✓ persönliche Beratung ✓ vor Ort in Melsungen & Tuttlingen.

Technology

Server
Apache
CMS
Joomla
Analytics
  • Google Tag Manager
Cookie consent
  • Cookiebot

Third-party hosts loaded (3)

  • www.googletagmanager.com×2
  • consent.cookiebot.com×1
  • www.bitv-widget.de×1

Social

Contact

Phone

Registration

Updated
2019-05-22
Name servers
  • ns1.dsg1.de.
  • ns2.dsg1.de.

DNS records live

NS
  • ns1.dsg1.de
  • ns2.dsg1.de
MX
  • 10 mta161.bitmarck.org
  • 10 mta162.bitmarck.org
TXT
  • MS=ms74578381
  • 2189ada026831659f4a3490f1cc8816bab189fc2fe3f488305a712691485651

Email authentication strong

SPF
v=spf1 a mx ip4:194.113.5.75 ip4:81.201.118.231 ip4:81.201.118.232 ip4:194.113.6.110 ip4:185.98.186.254 ip4:194.113.5.68 ip4:194.113.3.66 ip4:62.245.133.5 ip4:62.245.133.6 ip4:194.113.12.193 ip4:194.113.12.196 -all
strict (-all)
DMARC
v=DMARC1; p=quarantine;
policy: quarantine
DKIM
no key found at common selectors

Certificate (current)

Certum Domain Validation CA SHA2
from 2025-09-11 to 2026-09-11
Expires in 114 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bkk-bba.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak content type protection
Header values
referrer-policy
strict-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self), camera=(self), microphone=(self), fullscreen=(self), autoplay=(self), accelerometer=(self), gyroscope=(self), magnetometer=(self)
x-content-type-options
nosniff, nosniff
content-security-policy
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' *.google-analytics.com *.cookiebot.com *.google.de *.google.com *.google.at *.google.ch *.google-analytics.com *.googletagmanager.com *.cookiebot.com https://consentcdn.cookiebot.com/consentconfig/49d5cb7b-4648-4f2f-ab90-ee4d7f59b8cd/settings.json *.onlim.com https://app-premium.onlim.com *.dsg1.de https://www.bitv-widget.de/; style-src 'report-sample' 'self' 'unsafe-inline' *.cookiebot.com https://fonts.googleapis.com/ https://fonts.gstatic.com https://hello.myfonts.net *.dsg1.de https://www.bitv-widget.de/; object-src 'none'; base-uri 'self' https://app-premium.onlim.com/chat-app/; connect-src 'self' *.google-analytics.com https://stats.g.doubleclick.net *.cookiebot.com *.onlim.com wss://api-premium.onlim.com https://consentcdn.cookiebot.com https://www.google-analytics.com/j/collect; font-src 'self' data: https://app-premium.onlim.com https://fonts.googleapis.com/ https://fonts.gstatic.com/; frame-src 'self' https
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (6)

Linked from (2)

See all sites whose homepage links to bkk-bba.de →