comdirect.de

.de toplist crawl dns

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 2707 ms crawled 2026-05-18

DE · 193.41.133.1 · AS16107 Commerzbank Aktiengesellschaft

Reputation 100/100

Classifying

HTML metadata

Title: Finanzen selbstbestimmt | comdirect.de
Description: comdirect ist Ihre erste Adresse für Sparen, Anlegen und Handeln mit Wertpapieren. Smarte Lösungen für Finanzthemen machen Ihnen das Leben leichter.
Language: de
Canonical: https://www.comdirect.de/

Technology

Server: nginx

Social

Registration

Updated

2025-11-12

Name servers

ns2.commerzbank.com.
ns3.commerzbank.com.
ns4.commerzbank.com.
ns5.commerzbank.com.

DNS records live

NS

ns2.commerzbank.com
ns3.commerzbank.com
ns4.commerzbank.com
ns5.commerzbank.com

MX

10 gate1.comdirect.de
10 gate4.comdirect.de

TXT

Show 12 TXT records

adobe-idp-site-verification=993134e8ed2c50f6a4d27505ac126c2746089389188e5835866f6d3c709ad337
_globalsign-domain-verification=lEDlIMctsxTQs2n7xLhrQCc-jGhmOSCiC80hSdjd_h
bM20uk68S4hXY+gxdUcVCgBbxwiTTJolGF/8SrqUxbw=
docusign=e70dbf52-eb25-406d-b9b9-1738860c5baa
google-site-verification=dI_kTwUDl3tMamM-V7WOsgFEQaeBXjK498wCfJPMp2w
_yj7vsov24wmxlzqsynfrwwjg51lrspq
cisco-ci-domain-verification=195a12c1fa73f81680b6bfaffadb25d2b7b802be05f028ad0bd5d797fb284a47
QuoVadis=e9de2382-406b-48d3-a7c0-3a3aa2f7afaf
facebook-domain-verification=f5da1jlk0ud6rrremkaplwq7vudyet
_globalsign-domain-verification=lVxV90tbq6cedcOKiQShoRioKdAikwyR5i_jAN2JJ7
MS=ms56427697
apple-domain-verification=kdiRRKAwgV5QVKBu

Email authentication strong

SPF: v=spf1 ip4:193.41.132.130 ip4:193.41.132.131 ip4:193.41.135.66 ip4:193.41.135.67 ip4:193.41.135.68 ip4:193.41.132.151 ip4:193.41.132.152 ip6:2001:67c:2440:3100::/64 ip6:2001:67c:2440:4001::/64 -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; rf=afrf; ri=86400; rua=mailto:dmarc@comdirect.de; fo=1;
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

GlobalSign GCC R3 EV TLS CA 2025

from 2025-12-01 to 2027-01-02

Expires in 228 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.comdirect.de/cms/index.html?CIF_Check=true

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: connect-src 'self' https://www.comdirect.de https://protrader.comdirect.de https://kunde.comdirect.de https://b2b.comdirect.de https://nutzer.comdirect.de https://mobileapp.comdirect.de https://cfdapp.comdirect.de https://static.comdirect.de https://api.comdirect.de https://community.comdirect.de/ https://eurex.comdirect.de https://krypto.comdirect.de https://chartanalyzer.comdirect.de https://chartanalyzer-test.comdirect.de ;style-src 'self' https://static.comdirect.de/ccf2/ 'unsafe-inline' ;script-src 'self' 'strict-dynamic' 'nonce-5ac359c32b1d4c2abb583c7c3eb64a1f' https://static.comdirect.de/ccf2/ https://www.comdirect.de/cms/ https://www.comdirect.de/ngtx/assets/ https://www.comdirect.de/ngbrk/assets/ https://www.comdirect.de/ngfh/assets/ https://static.comdirect.de/ngtx/assets/ https://static.comdirect.de/ngbrk/assets/ https://static.comdirect.de/ngfh/assets/ https://finanzheldinnen.comdirect.de/ngfh/assets/ https://static.comdirect.de/ngvv/assets/ https://b2b.comdirect.de/ngvv/as
strict-transport-security: max-age=31536000; includeSubDomains