hek.de

.de crawl

First seen 2026-04-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 900 ms crawled 2026-05-04

DE · 160.44.11.15 · AS34086 T-Systems International GmbH

Reputation 100/100

Classifying

HTML metadata

Title

Homepage - HEK - Einfach. Erstklassig.

Description

Ihre Hanseatische Krankenkasse mit erstklassigen Leistungen und einfachen Serviceleistungen!

Language

Generator

TYPO3 CMS

Canonical

https://www.hek.de/

Translations

Open Graph

title: Homepage
description: Ihre Hanseatische Krankenkasse mit erstklassigen Leistungen und einfachen Serviceleistungen!

Technology

Server: Apache

Third-party hosts loaded (1)

cookie.newego.de×1

Social

Contact

Phone

+498000213213

Registration

Updated

2022-05-13

Name servers

ns1.telekom-domains.de.
ns2.telekom-domains.de.

DNS records live

NS

ns1.telekom-domains.de
ns2.telekom-domains.de

MX

10 issbh-smtp01.mas.t-systems-service.com
10 issbh-smtp02.mas.t-systems-service.com

TXT

Show 6 TXT records

_globalsign-domain-verification=6lqkhqTuRv70peVZSN796WpzqUl5DTYDGxof3UyoSH
MS=ms59270167
8yFLZazon0JR6dv0BS+Wbu3L1vR6Kc2pic73MHmyB1Q=
v=spf1 ip4:185.172.11.154 include:spf.protection.outlook.com include:spf.crsend.com include:_spf.general.transactional-mail-a.com include:spf.connectoor.com include:_spf.jpberlin.de a a:spf-issbh.mas.t-systems-service.com -all
apple-domain-verification=UBW3RkvZBp1XgWic
cisco-ci-domain-verification=45ae16287770dfdbf0e0a448131bbebe118740a83bdf523265dd4bfbdb9d0f56

Certificate (current)

Telekom Security ServerID OV Class 2 CA

from 2025-09-18 to 2026-09-23

Expires in 127 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.hek.de/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=63072000; includeSubdomains; preload