aqas.de

.de crawl

First seen 2026-04-13 · Last seen 2026-05-08 · ok HTTP/1.1 200 2705 ms crawled 2026-05-06

DE · 5.35.225.230 · AS20773 Host Europe GmbH

Reputation 100/100

Classifying

HTML metadata

Title

AQAS e.V. – Agentur für Qualitätssicherung durch Akkreditierung von Studiengängen

Description

Agentur zur Qualitätssicherung an Hochschulen mit Sitz in Köln

Language

Generator

WordPress 6.9.4

Canonical

https://www.aqas.de/

Feeds

AQAS e.V. » Feed RSS
AQAS e.V. » Kommentar-Feed RSS

Open Graph

title: AQAS e.V. – Agentur zur Qualitätssicherung
description: Agentur zur Qualitätssicherung an Hochschulen mit Sitz in Köln

Technology

Server: Apache
CMS: WordPress

Registration

Updated

2021-01-13

Name servers

ns19.domaincontrol.com.
ns20.domaincontrol.com.

DNS records live

NS

ns19.domaincontrol.com
ns20.domaincontrol.com

MX

1 aqas-de.mail.protection.outlook.com

TXT

Show 5 TXT records

aqas.de. 60 IN TXT "20211012013123427awdry7zbowdq2x0ksasfx7o69hzt2mb83z7pbypae9o3zua"
apple-domain-verification=8wRMRvOl6M4x309z
dcjt4uu0pk4bpomdulakqg4jvc
google-site-verification=W6zpNS_dgkdJZrm5RXGNk2q9JYeN66KHXL3OFvbl5eg
ms-domain-verification=3d29a8a6-0eb1-4d4f-8d1a-503db86c7a96

Email authentication strong

SPF

v=spf1 ip4:194.8.218.54 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-report@aqas.de; ruf=mailto:dmarc-forensic@aqas.de; fo=1;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+dYGzw7JwY5pdtjWnhuqVaoVs/k5tDZYO/3yljBGmR2FODS9dlv6f7Nomg/A6AGNZwWt5iX2f1uFT…

selectors probed

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2026-04-15 to 2026-10-30

Expires in 164 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.aqas.de/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: same-origin
permissions-policy: geolocation=(*), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(*), gyroscope=(*), fullscreen=(self), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'none'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: blob: data:; font-src 'self' data:; connect-src https:; child-src 'self' blob: https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://i.vimeocdn.com https://fresnel.vimeocdn.com https://player-telemetry.vimeo.com; object-src 'self'; media-src 'self'; form-action 'self' https://www.aqas.de/login; base-uri 'self'; frame-ancestors 'self' https://www.aqas.eu/; manifest-src 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin