openbankproject.com

.com crawl

First seen 2026-04-17 · Last seen 2026-05-15 · ok HTTP/1.1 200 1402 ms crawled 2026-05-12

DE · 18.196.139.123 · AS16509 Amazon.com, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Open Bank Project - Build, manage, and secure APIs in compliance with open banking standards worldwide
Language: en-US
Generator: WordPress 6.9.4
Canonical: https://www.openbankproject.com/

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (3)

cdnjs.cloudflare.com×5
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Variomedia AG

Created

2010-02-15

Expires

2027-02-15 271 days left

Updated

2026-02-16

Name servers

ns1.variomedia.de
ns2.variomedia.de

DNS records live

NS

ns1.variomedia.de
ns2.variomedia.de

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

stripe-verification=1eddb42b527a03b4e684d8e1d4287675965b324050735af73c557bfee03a9403
google-site-verification=cgnqKBh8vsNFb6EjCx0-oiam_Wt8OrvuSvXv_GetYAw

Email authentication partial

SPF

v=spf1 mx ip4:18.153.181.218 include:servers.mcsv.net include:_spf.google.com include:mcsv.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;sp=none;pct=100;rua=mailto:admin@tesobe.com;ruf=mailto:admin@tesobe.com;ri=86400;aspf=r;adkim=r;fo=1;

policy: none (monitoring only) · sp=none

DKIM

default: v=DKIM1;h=sha256;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Pj5ftA0GGBXQ6Cz7XDPIXfTJqy/PCFrjWOSn6iNXWkEvHKNfRf7bmKogDpRDzignihXJjB…
google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0XYm/mD878th5630UICMQFCwXJrWr0GhOeutdq3B9ESmx9uMM4xDxyKXfs9ZruSlQYoV7t9Y1K7ln+rGsGV…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

R12

from 2026-04-15 to 2026-07-14

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.openbankproject.com/

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")