sparkasse-bremen.de

.de crawl

First seen 2026-04-13 · Last seen 2026-05-20 · ok HTTP/1.1 200 4002 ms crawled 2026-05-07

DE · 195.140.53.53 · AS9099 Finanz Informatik GmbH & Co. KG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Internet-Filiale - Die Sparkasse Bremen AG
Description: Ihr Finanzpartner im Internet. Mit sicherem Online-Banking, vielen Angeboten und Services für Privat- und Firmenkunden.
Language: de
Canonical: https://www.sparkasse-bremen.de/de/home.html

Open Graph

email: mail@sparkasse-bremen.de
locality: Bremen
fax number: 0421 179-3333
postal-code: 28359
country-name: Germany
phone number: 0421 179-0
street-address: Universitätsallee 14

Technology

Third-party hosts loaded (1)

www.sparkasse.de×1

Social

Contact

Phone

04211790

Registration

Updated

2022-12-20

Name servers

ans1.ewetel.net.
ans2.ewetel.de.
ans3.ewetel.net.
ns1.dgbit.datagroup.de.

DNS records live

NS

ans1.ewetel.net
ans2.ewetel.de
ans3.ewetel.net
ns1.dgbit.datagroup.de

MX

10 y01es.mail.s-web.de
10 y02es.mail.s-web.de

TXT

_k7bdl6jflkaykpq0yrjes5l2l3i2usx
_u0cy8nv3bgbfyeb985b0vpglnwo98qp
amazonses:G99TPsZ2m4csoJveCXT0O5LbCVrwmXtglyMU3tonZSo=

Verified for

Adobe
Cisco
Miro

Email authentication strong

SPF

v=spf1 mx include:spf.mail.s-web.de include:spf2.sparkasse-bremen.de ip4:212.34.64.185 ip4:77.74.232.231 ip4:77.74.232.232 ip4:217.66.54.148 ip4:217.66.54.154 ip4:217.66.52.119 ip4:185.98.184.0/24 ip4:80.82.206.0/26 -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:rua-report@sparkasse-bremen.de

policy: none (monitoring only)

DKIM

mail: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2…

selectors probed

Certificate (current)

DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

from 2026-03-26 to 2026-10-11

Expires in 143 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.sparkasse-bremen.de/de/home.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: script-src 'self' blob: https://morris-server.de:8801 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; media-src 'self' data: blob: https://api.sparkassen-mediacenter.de https://sparkassen-mediacenter.de https://cdn.sparkassen-mediacenter.de
strict-transport-security: max-age=31536000