hausbank.de

.de crawl dns

First seen 2026-04-18 · Last seen 2026-05-15 · ok HTTP/1.1 200 4954 ms crawled 2026-05-12

DE · 195.200.52.43 · AS15590 Atruvia AG

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Hausbank München: Mietkautionen, WEG-Darlehen & Software | Hausbank München eG
Description: Hausbank München eG: Mietkautionen digital verwalten, WEG-Darlehen online beantragen und Verwaltersoftware sowie Beratungscenter entdecken.
Language: de-DE
Canonical: https://www.hausbank.de/startseite.html

Open Graph

url: https://www.hausbank.de/startseite.html
title: Hausbank München: Mietkautionen, WEG-Darlehen & Software | Hausbank München eG
language: de
description: Hausbank München eG: Mietkautionen digital verwalten, WEG-Darlehen online beantragen und Verwaltersoftware sowie Beratungscenter entdecken.

Technology

Third-party hosts loaded (2)

atruvia.scene7.com×14
cdn.m-m-m.de×5

Social

Registration

Updated

2025-08-16

Name servers

nsh1.atruvia.de.
nsh2.atruvia.com.
nsh3.atruvia.de.
nsh4.atruvia.com.

DNS records live

NS

nsh1.atruvia.de
nsh2.atruvia.com
nsh3.atruvia.de
nsh4.atruvia.com

MX

10 mail.hausbank.de
20 mail02.hausbank.de

TXT

Show 8 TXT records

D-TRUST=DLX459XX3OCM62C5P92L43I
google-site-verification=jS2WeWQBaGX09jXZKaquT5yFM8f-ydJ_9YmYRK4nH-I
MS=ms33918784
apple-domain-verification=lk8UMrDL1LlKOrB1
v=DKIM1;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHOKmkkKvZJVfATD+s/xnstN6PVmk76Em+JP7iVLyKRmJ4WIlNxhOc0Id+8yjcrIZHmyUQ/yWqniHBLwkIbnFcu5tRK64SbLJCA33P0gYLI+rqez8NHb+b6dU7mDSoxrP+iEi7Lia8tB4yeexM8ixZaDbMkXuBmswGVb0lHe5/TQIDAQAB
google-site-verification=Liva1o_XbO8mVMTIF99MwCKmdC_NMbaGD3vgQwgAMBM
QuoVadis=013355d4-25ed-49d3-a509-430c851371a8
atlassian-domain-verification=aCqYoqjyQAYzS1MXig6SyzXnIztRPQmPdtcecqTaCdAZ7KyebRFos2Ywk0qiASRY

Email authentication weak

SPF

v=spf1 include:spf.mailjet.com ip4:185.145.196.181 ip4:129.35.28.38 ip4:129.35.28.39 ?all

neutral (?all)

DMARC

not published

DKIM

dkim: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZGxX4J8Cx9zpvBBuaPZ/+gsch2yGY6pghq1ymLaJ7JX3IgrF66xHk3dkMuMYo9qZ4QfOkFR/+ZSymoQKu/n4TtV1dQ…

selectors probed

Certificate (current)

D-TRUST SSL Class 3 CA 1 EV 2009

from 2026-04-05 to 2026-10-20

Expires in 154 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.hausbank.de/startseite.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://maps.googleapis.com 'sha256-aSqN2R3jDvHFUL3vVOUtG6OJr1IF+Y31IPMdo0dLU6U=' 'nonce-b18cae5b6a3db6750d585df9ecace424' https://cdn.m-m-m.de https://*.etracker.com https://*.etracker.de https://api.signalize.com https://*.stage.bio; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-src 'self' https://www.youtube-nocookie.com https://www.google.com https://location.smartmaps.app https://fincalc-services-vrnw.de https://lw-mcp.de; frame-ancestors 'none'; object-src 'self'; style-src 'self' 'unsafe-inline' https:; img-src https: data:; connect-src 'self' data: https://maps.googleapis.com wss://*.mypurecloud.de https://cdn.m-m-m.de https://*.etracker.com https://*.etracker.de https://api.signalize.com https://*.stage.bio https://atruvia.scene7.com; block-all-mixed-content; script-src-attr 'none'; media-src https: https://atruvia.scene7.com
strict-transport-security: max-age=31536000