bsag.de

.de crawl

First seen 2026-04-22 · Last seen 2026-05-17 · ok HTTP/1.1 200 7223 ms crawled 2026-05-16

DE · 31.24.144.100 · AS49855 PLUTEX GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: BSAG: BSAG
Language: de-DE
Generator: TYPO3 CMS
Canonical: https://www.bsag.de/

Open Graph

title: BSAG

Technology

Server: Apache

Cookie consent

Cookiebot

Third-party hosts loaded (3)

cdn.eye-able.com×2
consent.cookiebot.com×1
fahrplaner.vbn.de×1

Social

Contact

Phone

+49421596059

Registration

Updated

2017-04-22

Name servers

ns10.microserve.de.
ns20.microserve.de.

DNS records live

NS

ns10.microserve.de
ns20.microserve.de

MX

100 mail1.bsag.de
50 mail.bsag.de

TXT

Show 9 TXT records

apple-domain-verification=PB0kdmk6RTF2n1iD
_y6omf5b60dvo5lstbl0tf5xp17w6r8d
google-site-verification=XSGgF7qsZTLkH-LbwC-jtJuuJU5Nx_-PvsjkVGkPotA
atlassian-domain-verification=zGSWlKvVzpIgpcNQW6Y61d8E1xZnma19qVFYhLodbn5BuccfmiYLePtaz1Ymjr/B
brevo-code:7a3f373c4e2a42fd73205f69ea28bf8d
MS=ms23548360
ifn36ppsrk1js31bbo82t9t2qc
f4j6lan9fcsve60kpervmi7ecf
swisssign-check=dASEqpt1yTkvJW4rubmVlgMSy9Y

Email authentication strong

SPF

v=spf1 exists:%{i}._i.%{d}._d.espf.agari-dns.net include:%{d}.ea.spf-protect.agari-dns.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:bremer-strassenbahn@rua.agari-eu.com; ruf=mailto:bremer-strassenbahn@ruf.agari-eu.com

policy: reject (enforced)

DKIM

default: v=DKIM1; k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpDDPZ1tpHTuI41RIvVAm1DieUvEZagH+9albfubA0gXGv32u5VlafCblZMpCcgZzpvSQ5sgt…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxQ9mYSd7v4l/iX3yP6u5F5QXo3AfoxNZi3FkE3ji0Hh5m9hiLwuhVP+oGiYjuWvvD3GzZUtyfduL8yFsFou…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNbYv9376wfSYIqbiSprrjYblAdWP8AmWOHK9ArjbZPqH97eGOt/6F0TWc/sDhV57vONfW4YBWMAyLJjkdv3…

selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-07-23 to 2026-07-23

Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.bsag.de/

present

x-content-type-options

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff