bundesimmobilien.de

.de crawl

First seen 2026-04-13 · Last seen 2026-05-20 · ok HTTP/1.1 200 514 ms crawled 2026-05-07

US · 99.83.237.53 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Bundesanstalt für Immobilienaufgaben
Language: de
Generator: Scrivito by JustRelate Group GmbH (scrivito.com)
Canonical: https://www.bundesimmobilien.de/

Open Graph

url: https://www.bundesimmobilien.de/
title: Bundesanstalt für Immobilienaufgaben
description: Gemeinsam für mehr Wohnraum Wohnraumoffensive Die BImA unterstützt die Wohnraumoffensive von Bund, Ländern und Kommunen. Dabei setzt Sie zum Beispiel auf serielle und modulare Bauweisen und nachhaltigere Rohstoffe. Hier gibt sie Einblicke in ausgewählte Bauprojekte. Erneuerbare Energien Die...

Technology

CDN: Amazon CloudFront
Server: AmazonS3

Third-party hosts loaded (2)

cdn0.scrvt.com×7
api.scrivito.com×2

Registration

Updated

2025-12-13

Name servers

ns1.itzbund.de.
ns2.itzbund.de.
pns.dtag.de.
secondary006.dtag.net.

DNS records live

NS

ns1.itzbund.de
ns2.itzbund.de
pns.dtag.de
secondary006.dtag.net

MX

10 mx1.bund.de
10 mx2.bund.de

Verified for

Apple
Cisco
Zoom

Email authentication strong

SPF: v=spf1 include:_spf1.bund.de include:spfa.myconvento.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:bundesimmobilien.de@dmarc.reports.bund.de;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-10 to 2026-09-24

Expires in 126 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bundesimmobilien.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; default-src 'self' data: https: wss: blob:; style-src 'self' data: https: wss: 'unsafe-inline'; script-src 'self' blob: *.arcgis.com https://api.scrivito.com https://assets.scrivito.com https://analytics.bundesimmobilien.de https://evergabe-proxy.bundesimmo.de https://static.bundesimmobilien.de https://static.bundesimmo.de localhost:*; connect-src 'self' *.arcgis.com https://api.scrivito.com https://api.vimeo.com https://assets.scrivito.com https://analytics.bundesimmobilien.de https://api.bundesimmobilien.de https://login.bundesimmobilien.de https://evergabe-proxy.bundesimmo.de https://*.bundesimmo.de localhost:*; img-src data: 'self' *.arcgis.com *.scrvt.com *.bundesimmo.de *.bundesimmobilien.de *.amazonaws.com gravatar.com maps.gstatic.com *.googleapis.com *.ggpht.com *.vimeocdn.com i0.wp.com i1.wp.com i2.wp.com localhost:*; block-all-mixed-content; frame-ancestors 'self' https://*.scrivito.com; object-src 'self' *.arcgis.com
strict-transport-security: max-age=63072000; includeSubDomains; preload