dkv.com

HTML metadata

Title: Private Kranken-, Reise- und Zusatzversicherungen | DKV
Description: Eine hohe Qualität & finanzielle Sicherheit sind die Stärke der DKV. Schließen Sie jetzt eine Versicherung bei DKV online ab. Jetzt informieren!
Language: de
Canonical: https://www.dkv.com/

Open Graph

title: Private Kranken-, Reise- und Zusatzversicherungen | DKV
locale: de
site name: DKV
description: Eine hohe Qualität & finanzielle Sicherheit sind die Stärke der DKV. Schließen Sie jetzt eine Versicherung bei DKV online ab. Jetzt informieren!

Technology

Server: Apache

Cookie consent

OneTrust

Third-party hosts loaded (3)

assets.adobedtm.com×2
cdn.cookielaw.org×2
touchpoint-sdk.alida.com×1

Social

Contact

Email

service@dkv.com

Phone

+498003746444

Address

Deutsche Krankenversicherung AG50594 Köln

Registration

Registrar

Deutsche Telekom AG

Created

1996-03-17

Expires

2027-03-18 302 days left

Updated

2026-02-18

Name servers

ns1.itergo.net
pns.dtag.de
secondary006.dtag.net

DNS records live

NS

ns1.itergo.net
pns.dtag.de
secondary006.dtag.net

MX

5 mx07-002b1401.pphosted.com
5 mx08-002b1401.pphosted.com

TXT

Show 7 TXT records

swisssign-check=HwR_YwIXIMRGpYG8kwtgFY2t8uA
google-site-verification=SFIe3tR4eiln6V8YEnOAzW2llED73pgqovVOh45yg-Y
MS=ms35231838
QuoVadis=1e718fa3-8a31-4738-96a6-a9e793ceb005
google-site-verification=azMSAL74BH1zQtNUG8BgtksCXiFE7m_5dubndukH7sk
MS=5D1108F4106876157AD7269B83067A14038A334B
_hx91ew4t7it2a6f7c79kcsanf19rirw

Email authentication strong

SPF: v=spf1 include:spf.ergo.de include:spf.de.cancom-mase.com ip4:195.227.15.167 ip4:213.95.13.132 ip4:213.95.13.133 ip4:213.198.99.210 ip4:213.198.99.211 ip4:195.30.231.225 -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-09-03 to 2026-10-05

Expires in 138 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.dkv.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.dkv.com *.ergo.de *.ergo.com *.cloudfirst.digital; script-src 'self' 'unsafe-eval' *.dkv.com *.ergo.de *.ergo.com *.cloudfirst.digital *.dynatrace.com *.realperson.de smartforms.ekomi.com *.trackjs.com *.google.com *.googlesyndication.com www.gstatic.com maps.googleapis.com www.youtube.com *.vimeo.com *.fullstory.com *.onetrust.com cdn.cookielaw.org assets.adobedtm.com cdn.jsdelivr.net *.chatbase.co *.cnd-motionmedia.de *.facebook.net *.outbrain.com *.taboola.com *.googletagmanager.com www.googleadservices.com *.intelliad.de *.adform.net *.bing.com bat.bing-int.com *.spoteffects.net *.doubleclick.net *.alida.com *.alidalabs.com 'unsafe-inline'; style-src 'self' *.dkv.com *.ergo.de *.ergo.com *.cloudfirst.digital *.realperson.de smartforms.ekomi.com fonts.googleapis.com *.gstatic.com cdn.jsdelivr.net 'unsafe-inline'; img-src data: 'self' *.udg.de *.dkv.com *.ergo.de *.ergo.com *.cloudfirst.digital *.realperson.de cdn.cookielaw.org *.chatbase.co smartforms.ekomi.com
strict-transport-security: max-age=63072000; includeSubDomains; preload