indexo.dev

aw-waf.de

.de crawl

First seen 2026-04-15 · Last seen 2026-05-11 · ok HTTP/1.1 200 1373 ms crawled 2026-05-11

DE · 162.55.242.230 · AS24940 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Willkommen bei den Abwasserbetrieben Warendorf
Language
de

Technology

Server
nginx

Registration

Updated
2026-02-12
Name servers
  • ns1.ncserve.de.
  • ns2.ncserve.de.
  • ns3.ncserve.de.
  • ns4.ncserve.de.

DNS records live

NS
  • ns1.ncserve.de
  • ns2.ncserve.de
  • ns3.ncserve.de
  • ns4.ncserve.de
MX
  • 10 nsp.warendorf.de
Verified for
  • Apple
  • Atlassian

Email authentication partial

SPF
v=spf1 a:nsp.warendorf.de a:cqux09.citeq.de a:cqux08.citeq.de ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc-report@warendorf.de; aspf=r; adkim=r
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-05-05 to 2026-08-03
Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.aw-waf.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • short HSTS max-age
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' 'unsafe-inline' data: *.active-city.net *.active-city.de https://a.tile.openstreetmap.org/; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.active-city.net *.active-city.de; media-src 'self' data: blob: *.active-city.net *.active-city.de; frame-src 'self' *.active-city.net *.active-city.de; frame-ancestors 'self' *.active-city.net *.active-city.de; font-src 'self'; connect-src 'self' https://piwik.active-city.net; report-uri https://sentry.zmart-ivent.de/api/23/security/?sentry_key=668667ebde3d4f16aa87e488587ad902
strict-transport-security
max-age=86400;

Linked from (1)