auslandsschulwesen.de

.de crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 11117 ms crawled 2026-05-17

DE · 80.245.159.165 · AS35704 ITZBund

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: ZfA - Startseite
Description: Homepage des deutschsprachigen Auftritts
Language: de
Generator: Government Site Builder
Canonical: https://www.auslandsschulwesen.de/DE/Home/home_node.html

Technology

Server: Apache

Third-party hosts loaded (1)

piwik.itzbund.de×1

Social

Registration

Updated

2026-02-20

Name servers

a.babieldns.de.
b.babieldns.de.
c.babieldns.de.
d.babieldns.de.

DNS records live

NS

a.babieldns.de
b.babieldns.de
c.babieldns.de
d.babieldns.de

MX

1 w01fa72b.kasserver.com
100 w01fa72b.kasserver.com
5 w01fa72b.kasserver.com

TXT

D-TRUST=NZRTRZ656TRERFSMW8DPOBX

Verified for

GlobalSign
HARICA
Microsoft 365

Email authentication partial

SPF: v=spf1 mx a ?all
neutral (?all)
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:dmarc-reports@babiel.net; ruf=mailto:dmarc-reports@babiel.net; fo=1;
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS RSA 1

from 2025-11-28 to 2026-11-28

Expires in 192 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.auslandsschulwesen.de/DE/Home/home_node.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; connect-src 'self' *.itzbund.de *.googleapis.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com piwik.itzbund.de *.youtube.com;object-src 'self' multimedia.gsb.bund.de medien10.gsb.bund.de piwik.itzbund.de; media-src 'self' multimedia.gsb.bund.de medien10.gsb.bund.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.openstreetmap.org *.googleapis.com piwik.itzbund.de *.geodatenzentrum.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de; frame-ancestors 'self' zfa-editor.preview.kkn.zd.intranet.bund.de piwik.itzbund.de zfa-zfa-editor.preview.kkn.zd.intranet.bund.de *.facebook.com
strict-transport-security: max-age=31536000