buderus.com

HTML metadata

Title: Buderus - the system expert for HVAC
Description: Buderus sets benchmark in energy-efficient heating, cooling and ventilation systems - competent, personal and reliable.
Language: en-LANDING
Canonical: https://www.buderus.com/en/

Open Graph

url: https://www.buderus.com/en/
title: Buderus - the system expert for HVAC
locale: en_LANDING
site name: Buderus
description: Buderus sets benchmark in energy-efficient heating, cooling and ventilation systems - competent, personal and reliable.

Technology

Server: Apache

Third-party hosts loaded (1)

dock.ui.bosch.tech×2

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2000-02-11

Expires

2027-02-11 255 days left

Updated

2026-02-07

Name servers

gwa.fe.bosch.de
gwa2.fe.bosch.de

DNS records live

NS

gwa.fe.bosch.de
gwa2.fe.bosch.de

MX

10 buderus-com.mail.protection.outlook.com

TXT

Show 4 TXT records

2ryz2sv6slq1j8rtwvn30m2d4c96qs0c
ft92F/jcqnPzBM0BhedaIAQUdYg429mkuEr7VvR7l3Fnn/1pwkUbBsVXlBaQzPlydTbLW1fwtyydXS3xvu+i0w==
_kqg7xtmi9zquht2dkr34ahnexp8uew4
d5n2H7BHVERmRi0zXgBTjRBEkk3IgG9Jn5ExQazqpBPy7qBiRjn1XHmw6TI1spofXYO+1xt4rs+/fVLRwd/iaQ==

Verified for

Adobe
Google
Meta
Microsoft 365
Miro

Email authentication strong

SPF

v=spf1 include:_spf.bosch.de -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=none; aspf=s; adkim=s;

policy: reject (enforced) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGvF/z+B3P2i2VFXCSstQ8LuohcVF9A2x7c9EzrsQeOS7r0KnTVMHm8KdsvSycT9bsmKWbE6VnIn/wjt79LL…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslGRQa8MjVuC46gC3/MFA6sd7UPCelbD2ItWJjvRWCuWBfi3iBns85bkAreidjNE2bEIESCdsL8Z4n…

selectors probed

Certificate (current)

Corporation Service Company RSA OV SSL CA 2

from 2025-11-20 to 2026-12-12

Expires in 194 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.buderus.com/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), clipboard-read=(), clipboard-write=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src https://*.experimentation.dev *.kameleoon.com *.kameleoon.eu *.kameleoon.io dock.ui.bosch.tech *.hotjar.io *.hotjar.com wss://*.hotjar.com 'self' script.hotjar.com vc.hotjar.io in.hotjar.com *.yandex.com *.yandex.ru *.comagic.ru extranet.buderus.com s.webtrends.com *.boschtt-documents.com services.kittelberger.net *.mycliplister.com mycliplister.com *.google-analytics.com stats.g.doubleclick.net; media-src 'self' *.boschtt-documents.com services.kittelberger.net *.mycliplister.com mycliplister.com; font-src 'self' *.hotjar.com *.yandex.ru *.comagic.ru fonts.gstatic.com data:; object-src data: 'self' *.yandex.ru *.comagic.ru ; img-src 'self' *.kameleoon.eu *.kameleoon.com *.experimentation.dev *.google-analytics.com *.googletagmanager.com *.buderus.com buderus.com *.azurewebsites.net http: s096l072-hc-mwf-prd.app.intra bott-fs.nautilus https: *.azurewebsites.net s096l072-hc-mwf-prd.app.intra bott-fs.nautilus blob: data: https://optimize.google.com https://www.google-analy
strict-transport-security: max-age=31536000; includeSubDomains; preload