flossbachvonstorch.de

HTML metadata

Title: Flossbach von Storch
Description: Als unabhängige Vermögensverwaltung managt Flossbach von Storch Multi-Asset-Fonds, Aktienfonds und Anleihefonds.
Language: de-DE
Generator: TYPO3 CMS
Canonical: https://www.flossbachvonstorch.de/de

Open Graph

title: Flossbach von Storch - Vermögensverwaltung
description: Als unabhängige Vermögensverwaltung managt Flossbach von Storch Multi-Asset-Fonds, Aktienfonds und Anleihefonds.

Technology

Server: myracloud

Third-party hosts loaded (1)

www.google.com×1

Social

Contact

Address: Ottoplatz 1, 50679, Köln, DE

Registration

Updated

2025-02-05

Name servers

a.myradns.de.
b.myradns.de.
c.myradns.de.

DNS records live

NS

a.myradns.de
b.myradns.de
c.myradns.de

MX

0 flossbachvonstorch-de.mail.protection.outlook.com

TXT

R/p5xbXUYv0TBiV2yjyiuZAgbcu44bPMaeDOxGMgVH6C9YMKW8UNGWfRcY2cfWtJq3/HaviT4zNwPVbOZs/Oxw==

Verified for

1Password
Dynamics 365
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a:mx.fvs.activeguard.cloud include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:2mrwl8uy@ag.eu.dmarcian.com; aspf=s; adkim=s

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfG0fBpmLd4m2AK6vGeZ2vfGReufilEFQsYRcaQAs/ubgt9QMf/lXYINvgfIVFlYugCcJJYUT9im+oeIIpOU…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOhGi2ZOAD2mD64/uT940Ui2DOJKWdP1tt2iuZtWCbkO/mNFUEMHiDGSegvX8AUy2TxNgDPtxU6mxZiV1IYd…

selectors probed

Certificate (current)

Thawte TLS RSA CA G1

from 2025-08-28 to 2026-08-28

Expires in 99 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.flossbachvonstorch.de/de

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.flossbachvonstorch.de; style-src 'self' 'unsafe-inline' https://dynamic.flossbachvonstorch.be https://static.flossbachvonstorch.be https://*.flossbachvonstorch.de https://tagmanager.google.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com https://app.cituro.com https://www.googletagmanager.com https://player.podigee-cdn.net https://static.cleverpush.com https://player.3qsdn.com https://*.consentmanager.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://dynamic.flossbachvonstorch.be https://static.flossbachvonstorch.be https://*.flossbachvonstorch.de https://*.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://static.hotjar.com https://script.hotjar.com https://app.cituro.com https://*.clarity.ms https://code.highcharts.com https://player.3qsdn.com https://static.clev
strict-transport-security: max-age=31536000 ; includeSubDomains; preload; redirectHttpToHttps=true