bbwind.de

.de crawl

First seen 2026-04-12 · Last seen 2026-05-16 · ok HTTP/1.1 200 981 ms crawled 2026-05-04

DE · 5.1.80.133 · AS205948 creoline GmbH

Reputation 100/100

Classifying

HTML metadata

Title: BBWind Projektberatungsgesellschaft mbH
Description: Die BBWind Projektberatungsgesellschaft mbH entwickelt und betreut Bäuerliche Bürgerwindparks im ländlichen Raum.
Language: de
Generator: webEdition CMS

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Phone

Registration

Updated

2022-07-14

Name servers

ns1.creolineserver.com.
ns2.creolineserver.com.
ns3.creolineserver.com.
ns4.creolineserver.com.

DNS records live

NS

ns1.creolineserver.com
ns2.creolineserver.com
ns3.creolineserver.com
ns4.creolineserver.com

MX

10 mxtls.expurgate.net

TXT

Show 6 TXT records

linkedin-site-verification=500d60ad-9aca-4de0-8f86-1526fcd9f45f
creoline-domain-verification=eeefcd7824c1a389c52c1ed4db527cc3d6569f39
459e0f2b6cfa97aec4c39dd2528d3b2ececd444027357d0706a51bcd81c37e8e
v=spf1 a mx ip4:85.214.21.134 ip4:85.214.195.252 ip4:85.214.42.60 ip4:85.214.155.165 ip4:85.214.251.135 ip4:81.169.162.35 include:_spf.creoline.de include:_spf.expurgate.net include:spf.protection.outlook.com ~all
canva-site-verification=oL4cKEQn391gcQop2sYfNA
MS=ms68495117

Certificate (current)

R13

from 2026-03-11 to 2026-06-09

Expires in 20 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bbwind.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak content type protection

Header values

referrer-policy: same-origin
x-frame-options: DENY
permissions-policy: geolocation=(), microphone=(), midi=(), camera=(), usb=(), magnetometer=(), accelerometer=(), vr=(), speaker=(), ambient-light-sensor=(), gyroscope=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; img-src 'self' https://img.youtube.com; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com;
strict-transport-security: max-age=31536000, max-age=15768000; includeSubDomains