metafinanz.de

HTML metadata

Title

Home - metafinanz

Language

de

Generator

SEOmatic

Canonical

https://metafinanz.de/

Translations

de
en

Open Graph

url: https://metafinanz.de/
title: Home
locale: de
site name: metafinanz
locale:alternate: en

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (4)

consent.cookiefirst.com×2
api.cookiefirst.com×1
edge.cookiefirst.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

+49 89 3605310

Registration

Updated

2025-07-22

Name servers

damien.ns.cloudflare.com.
magali.ns.cloudflare.com.

DNS records live

NS

damien.ns.cloudflare.com
magali.ns.cloudflare.com

MX

10 metafinanz-de.u-v1.mx.microsoft

TXT

Show 5 TXT records

Value cisco-ci-domain-verification=56a94d5ffe9c2b45da3db922f6eafc6ee8c243aa3d22b7217873ca35c29fd5b2
mLcv8s3VeEcFvK7B54WOKGDhS6Z/oCOGIqiItx4QAb+HdTLmVWDEGKmoJ5a5fPSmjQx5iLX0ecYPSr/JhcRSUQ==
msfpkey=6u5s4eqmsb0y7obfkco9cq7xa
s2LzR6ZtDZ4KLW3AgPMYKwn1cDiSb5fOc8WoKInEJP325dacfZMeQAe5P6t8b4DkwR7pLW2XWbrnGKu1qj9mZw==
successfactors-site-verification=NmRiY2U2YmM0ZmI1NTdmMDg2ZTQ2NDY3NmVlNTc1NzNiYjRhOTg1YjQ1YjJjYjEzYTc3YzdiZjg1NjI2ZDkyZQ==

Verified for

Apple
Cisco Webex
Dynamics 365
Google
Miro

Email authentication strong

SPF

v=spf1 include:spf.mailjet.com include:spf.protection.outlook.com include:_spf-dc33.sapsf.eu include:spf.corpex.de include:_spf.jpberlin.de include:spf.cloudmail.ondemand.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:Rua-allianz@allianz.com; fo=1

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQPeNSJd0TM9iYPwQirS3wL+2YZp6shO+rDb8hz1CCrWzOv2717F1qtkkfV/GFpO6G9oTEtiz6c5aA…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTSgNONSk7pfQ3kN2vbUdpJpvjT7HmRAZKXnkvOmqO6pfNV6PjgxZ/lCHKFQhwJE3uR6wqqYhpJcLl…

selectors probed

Certificate (current)

R13

from 2026-03-23 to 2026-06-21

Expires in 32 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://metafinanz.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=(self "https://youtube-nocookie.com" "https://*.youtube-nocookie.com"), fullscreen=(self "https://youtube-nocookie.com" "https://*.youtube-nocookie.com")
x-content-type-options: nosniff
content-security-policy: base-uri 'self' matomo.metafinanz.de; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' azureedge.net *.azureedge.net *.cookiefirst.com *.curator.io curator.io matomo.metafinanz.de js.stripe.com *.zemanta.com zemanta.com *.adform.net adform.net *.licdn.com licdn.com dynamics.com *.svc.dynamics.com *.mkt.dynamics.com *.googletagmanager.com googletagmanager.com *.google.com *.google.de blob:; style-src 'self' 'unsafe-inline' *.cookiefirst.com *.curator.io curator.io matomo.metafinanz.de; img-src 'self' data: blob: *.ytimg.com ytimg.com *.ggpht.com ggpht.com *.linkedin.com curator-assets.b-cdn.net *.licdn.com licdn.com *.zemanta.com zemanta.com matomo.metafinanz.de dynamics.com *.svc.dynamics.com *.mkt.dynamics.com *.azureedge.net *.g.doubleclick.net *.google.com *.google.de *.googleadservices.com *.azureedge.net *.mkt.dynamics.com; font-src 'self' data:; object-src 'none'; media-src 'self' *.youtube.com youtube.com dynamics.com *.svc.dynamics.com; form-action 'self' dyn
strict-transport-security: max-age=15768000