bgw-online.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 800 ms crawled 2026-05-19

DE · 91.224.227.85 · AS56532 Deutsche Gesetzliche Unfallversicherung e.V. (DGUV)

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Startseite - bgw-online
Description: Die Berufsgenossenschaft für Gesundheitsdienst und Wohlfahrtspflege (BGW) ist Ihre verlässliche Partnerin für ein gesundes Berufsleben. Wir sind die gesetzliche Unfallversicherung für Menschen, die in den Bereichen Gesundheit und Soziales arbeiten - und damit Teil des deutschen Sozialsystems.
Language: de
Generator: CoreMedia CMS
Canonical: https://www.bgw-online.de/bgw-online-de

Technology

Server: Apache

Third-party hosts loaded (1)

code.etracker.com×1

Social

Registration

Updated

2018-03-08

Name servers

ns0.de.colt.net.
ns8.colt.net.

DNS records live

NS

ns0.de.colt.net
ns8.colt.net

MX

10 mail109a.cnuv.de
10 mail109b.cnuv.de

TXT

Show 4 TXT records

_35zq8lx45j8f6czrda3fwfmx0sx9y3l
_2pl7yf6kdytl3vp5qi0axokcinhf6mo
swisssign-check=EZgDidvCqbWtBLgLbGr5NYi7GgY
duo_sso_verification=D6fKwK8lokgiYs6OYyuo6Yf2KWJ2qTrFSbTaQhDucqdeUI3aenKPMfsvapoWHvhc

Verified for

Adobe
Apple
Cisco
Google
Miro

Email authentication weak

SPF: v=spf1 mx ip4:85.214.96.136 ip4:91.224.226.143 include:_spf.cnuv.de -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-07-01 to 2026-08-02

Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bgw-online.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googleapis.com https://*.etracker.com https://*.etracker.de https://*.podigee-cdn.net https://cdn.podigee.com https://statistik.bgw-online.de https://www.youtube.com; font-src 'self' https://player.podigee-cdn.net https://fonts.gstatic.com https://statistik.bgw-online.de; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://cdn.podigee.com https://player.podigee-cdn.net; img-src 'self' https://*.ccp.prod.web https://*.bgw-online.de https://bgw-online.de https://bgw-young.de https://gdabewegt.de https://maps.gstatic.com https://*.googleapis.com https://cdn.podigee.com https://*.podigee-cdn.net data:; object-src 'none'; frame-src 'self' https://*.rtstudio.de https://*.chatmodul.de https://*.bgw-online.de https://www.youtube.com https://www.google.com https://cdn.podigee.com https://player.podigee-cdn.net https://my.matterport.com https://storage.net-fs.com https://start.v
strict-transport-security: max-age=31536000; includeSubDomains