eb.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-16 · ok HTTP/1.1 200 1974 ms crawled 2026-05-07

DE · 195.200.52.171 · AS15590 Atruvia AG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Nachhaltige Finanzlösungen - Evangelische Bank
Description: Wir gestalten mit unseren Kunden eine nachhaltig lebenswerte Gesellschaft.
Language: de-DE
Canonical: https://www.eb.de/startseite.html

Open Graph

url: https://www.eb.de/startseite.html
title: Evangelische Bank - Nachhaltige Finanzlösungen
language: de
description: Wir gestalten mit unseren Kunden eine nachhaltig lebenswerte Gesellschaft.

Technology

Third-party hosts loaded (2)

atruvia.scene7.com×20
okp.usu-digitalconsulting.com×5

Social

Registration

Updated

2025-06-03

Name servers

nsh1.atruvia.de.
nsh2.atruvia.com.
nsh3.atruvia.de.
nsh4.atruvia.com.

DNS records live

NS

nsh1.atruvia.de
nsh2.atruvia.com
nsh3.atruvia.de
nsh4.atruvia.com

MX

Show 8 MX records

20 omail22.gadmail.de
20 omail23.gadmail.de
20 rmail22.gadmail.de
20 rmail23.gadmail.de
30 gmail22.gadmail.de
30 gmail23.gadmail.de
30 wmail22.gadmail.de
30 wmail23.gadmail.de

TXT

Show 7 TXT records

brevo-code:4a7aa85723516fe8ec212b7aa8a3c0eb
brevo-code:68657437963b2afc6bd531677526b2dd
QuoVadis=73cc2cdb-bf45-4812-a193-bbc160e07858
MS=ms12069359
D-TRUST=454ZP44YHINFQY69Y2JWE6U
D-TRUST=FZZLZXYD35COCDRZIZP5YFY
apple-domain-verification=BjwKH1LBs0Qp2Uo3

Email authentication partial

SPF

v=spf1 include:net1.spf.fiduciagad.de include:spf.protection.outlook.com include:spf.mailjet.com include:spf1.eb.de include:spf2.eb.de include:aws.de1.spf.staffbase.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

D-TRUST SSL Class 3 CA 1 EV 2009

from 2026-04-06 to 2026-10-21

Expires in 154 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.eb.de/startseite.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://maps.googleapis.com 'sha256-aSqN2R3jDvHFUL3vVOUtG6OJr1IF+Y31IPMdo0dLU6U=' 'nonce-abbaa77b194fb1ed31b5703d06e29577' https://cdn.cookielaw.org https://assets.adobedtm.com https://connect.facebook.net https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://analytics.tiktok.com https://snap.licdn.com https://s.pinimg.com https://okp.usu-digitalconsulting.com https://doo.net https://*.sibforms.com https://*.brevo.com https://*.loyjoy.com https://*.etracker.com https://*.etracker.de https://*.facebook.com https://*.facebook.net https://google.de https://*.google.de https://google.com https://*.google.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://www.google-analytics.com; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-src 'self' https://www.youtube-nocookie.com https://3d-tour.linsenspektrum.de https://fincalc-s
strict-transport-security: max-age=31536000