interhyp.de

HTML metadata

Title: Finanzierung mit Interhyp – Ihr Spezialist für Baufinanzierung
Description: Finanzierung mit besten Konditionen: online berechnen, informieren, persönliche Beratung zur optimalen Baufinanzierung – über 500 Darlehensgeber!
Language: de
Canonical: https://www.interhyp.de/

Open Graph

url: https://www.interhyp.de/
title: Finanzierung mit Interhyp – Ihr Spezialist für Baufinanzierung
description: Finanzierung mit besten Konditionen: online berechnen, informieren, persönliche Beratung zur optimalen Baufinanzierung – über 500 Darlehensgeber!

Technology

CMS: Next.js

Cookie consent

Usercentrics

Third-party hosts loaded (1)

web.cmp.usercentrics.eu×1

Social

Contact

Phone

0800200151515

Address

August-Everding-Straße 24, 81671, München, München, DE

Registration

Updated

2023-02-03

Name servers

ns1-01.azure-dns.com.
ns2-01.azure-dns.net.
ns3-01.azure-dns.org.
ns4-01.azure-dns.info.

DNS records live

NS

ns1-01.azure-dns.com
ns2-01.azure-dns.net
ns3-01.azure-dns.org
ns4-01.azure-dns.info

MX

0 interhyp-de.mail.protection.outlook.com

TXT

Show 11 TXT records

twilio-domain-verification=848ac18075ff37850333d3fde95d14e1
status-page-domain-verification=x7jhbwpfdglh
site24x7-signals-domain-verification=2f79a14083d2ed177323887033830f26
adobe-idp-site-verification=8b81f7b92ccac0b65bab7d47f9fcecaeda6f04ac870b79133d8ac54be7b53534
MS=ms25364075
jamf-site-verification=klmFc4I5j0_cyUkf--c-NA
google-site-verification=DPjrMjrYQAo0m_EoBz5zORjRg4jMwYaPTY32sU7wVgc
atlassian-domain-verification=OfeKDyChyqsLdovMkWV35ToUsSGnzlrjssnoJGrdG2rsZQkkC57cKvntt5hXEfCS
stripe-verification=DE2E525500A003B765EB99EF7BCF6FBE5FA395E770F230C45A8DA91371138EBB
miro-verification=19cc26d2aedb3b6ee2c876c8cfae53be11c5174a
apple-domain-verification=LE9KHUV3eZZM8T51

Email authentication strong

SPF

v=spf1 ip4:80.190.115.0/24 ip4:80.190.122.0/24 ip4:212.121.139.0/24 ip4:62.96.212.0/24 ip4:185.113.164.0/22 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3VKVe671WR+JJlapd9kwyEICFNkI+B6onh8wpum4LPzLhFPTRZ4oJ+2sy8wS3SUqEz1SBpYNnyF55Fqe5Mo…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA99ASGe7HFMIQH+uLswpjCsibkTyJxzflvq2SDS+ZI2BF65eSvl5Plf9sBVKLzxaTysN0v0I8mFhL9aEkyi…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsuCNtaHyYIWbj3Lvc3GDXpRsqIA/yh6JZ9x+8v4hDGEVmze5BBonsry8dmRXU/GhHFkTP7dZPoHvhNtPj…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSuoL5/n/LpcHnybkS99M9o9/HjHSUIb5MzlXbKf+UTkdhfb+Kt95eO6yVbLcC9cFrDr73m8sR9B0cH62H…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-08-05 to 2026-09-05

Expires in 108 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.interhyp.de/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; child-src 'self' blob:; connect-src 'self' data: *.usercentrics.eu www.googleadservices.com *.interhyp-intern.de www.gstatic.com bat.bing.com bat.bing.net www.facebook.com connect.facebook.com manager.eu.smartlook.cloud events-writer.smartlook.com web-writer.eu.smartlook.cloud assets-proxy.smartlook.cloud *.optimizely.com my.tealiumiq.com googleads.g.doubeclick.net www.googletagmanager.com www.google.com www.google.de *.hcaptcha.com *.captchafox.com *.wt-eu02.net siteintercept.qualtrics.com s.qualtrics.com *.googleapis.com *.contentsquare.net *.trustpilot.com googleads.g.doubleclick.net *.youtube.com *.gstatic.com blob:; worker-src 'self' blob:; font-src 'self' data: 'unsafe-inline' fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.hcaptcha.com *.captchafox.com fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.usercentrics.eu fat.financeads.net *.interhyp-partnerprogramm.de bat.bing.com bat.bing.net *.googleapis.com siteintercept.qualtrics.
strict-transport-security: max-age=15768000; includeSubDomains