hansemerkur.de

.de crawl dns

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 7807 ms crawled 2026-05-19

DE · 185.190.195.111 · AS206266 HanseMerkur Krankenversicherung AG

Reputation 100/100

Classifying

HTML metadata

Title: Versicherungen für Gesundheit, Reise, Vorsorge | HanseMerkur
Description: Die HanseMerkur ist Ihre Versicherung für Reise- und Krankenversicherungen, Altersvorsorge, Risikoabsicherung, Eigentumschutz und mehr. ►Jetzt informieren.
Language: de-DE
Canonical: https://www.hansemerkur.de/

Open Graph

url: https://www.hansemerkur.de/
title: HanseMerkur
description: Die HanseMerkur ist Ihre Versicherung für Reise- und Krankenversicherungen, Altersvorsorge, Risikoabsicherung, Eigentumschutz und mehr. ►Jetzt informieren.

Technology

Server: HM-HCP

Cookie consent

Usercentrics

Third-party hosts loaded (2)

app.usercentrics.eu×1
www.etracker.de×1

Social

Contact

Phone

040 4119-7340

Address

st uns wichtig4.6/5651

Registration

Updated

2026-02-19

Name servers

apollo.ns.cloudflare.com.
blair.ns.cloudflare.com.

DNS records live

NS

apollo.ns.cloudflare.com
blair.ns.cloudflare.com

MX

10 vamail01.hansemerkur.de
10 vamail02.hansemerkur.de
20 vamail03.hansemerkur.de

TXT

MS=E1F235929829B02028756E542BAF441D4600E197
swisssign-check=JOrYZfJYQRKa37F8VBkG16kvPQtLvYV0xXYKlpFKMf

Verified for

Adobe
Apple
Brevo
Cisco
Microsoft 365
Miro
TeamViewer

Email authentication strong

SPF

v=spf1 include:spf-ip-a.hansemerkur.de include:spf-ip-b.hansemerkur.de include:spf-include-a.hansemerkur.de -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:hm_dmarc@hansemerkur.de,mailto:dmarc_agg@vali.email; ruf=mailto:postmaster@hansemerkur.de; fo=0; adkim=r; aspf=r; pct=100; rf=afrf; ri=86400; sp=reject;

policy: reject (enforced) · sp=reject

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
dkim: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8zEBZnM6aW6PhO22wSjp47g7mpkALv7RLn0U+0QKAmKyoFs0ZQFoBrnRiDTgR3B2U+zEii8/9+n9TptD5aNY…

selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-11-25 to 2026-12-27

Expires in 220 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.hansemerkur.de/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: connect-src 'self' *.tuerchen.com tuerchen.app *.tuerchen.app *.etracker.de *.etracker.com *.usercentrics.eu *.cmp.usercentrics.eu *.novomind.com *.ekomiapps.de *.google.de *.googleadservices.com *.google.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.bing.net *.bing.com *.trbo.com *.quantserve.com *.hansemerkur-vertriebsportal.de *.hansemerkur.de *.fitrockr.com *.heyflow.com *.loyjoy.com *.moin.ai wss://bot.moin.ai *.qualtrics.com *.clarity.ms; default-src 'self'; font-src 'self' data: *.novomind.com font.gstatic.com *.tuerchen.app core.tuerchen.com *.loyjoy.com *.heyflow.cloud *.moin.ai; frame-ancestors 'self' *.hanse-merkur.de newapp.etracker.com app.etracker.com localhost *.hokify.de www.dwin1.com; frame-src 'self' blob: hansemerkur.happymo.re *.usercentrics.eu *.cmp.usercentrics.eu youtube.com *.youtube.com *.youtube-nocookie.com *.novomind.com *.kasko.io *.kaskocloud.com *.google.com *.trbo.com *.facebook.com *.pantumdetect.com *.awin1.com *.hansemerkur.d
strict-transport-security: max-age=31536000; includeSubDomains; preload