citizenwatch.eu

.eu crawl

First seen 2026-04-13 · Last seen 2026-05-07 · ok HTTP/1.1 200 2053 ms crawled 2026-05-07

DE · 88.99.126.235 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title: Citizen Onlineshop | BETTER STARTS NOW
Description: Citizen Onlineshop | BETTER STARTS NOW | Citizen Onlineshop
Language: en
Canonical: https://citizenwatch.eu/en/info/

Open Graph

url: citizenwatch.eu/en/info/
title: Citizen Onlineshop | BETTER STARTS NOW
site name: Citizen Onlineshop
description: Citizen Onlineshop | BETTER STARTS NOW | Citizen Onlineshop

Technology

Server: HTCServer
CMS: Gatsby

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (3)

www.googletagmanager.com×2
ccm19.hatraco.net×1
www.google-analytics.com×1

Social

Contact

Address: Hans-Duncker-Str. 8, 21035, Hamburg, DE

DNS records live

NS

ns1.pool2.omc-dns.de
ns2.pool2.omc-dns.de
ns3.pool2.omc-dns.de
ns4.pool2.omc-dns.com
ns5.pool2.omc-dns.com
ns6.pool2.omc-dns.com

MX

6 mail.citizenwatch.eu

Email authentication strong

SPF: v=spf1 a mx a:citizenwatch.eu include:spf.mailjet.com ip4:94.102.220.150 -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:dmarc@citizenwatch.eu
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-15 to 2026-07-14

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://citizenwatch.eu/en/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(),sync-xhr=(self),microphone=(),camera=(),fullscreen=(self),payment=(self)
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.paypal.com *.payments-amazon.com *.ccm19.de *.sitesearch360.com *.doubleclick.net *.etracker.com *.etracker.de *.facebook.net *.flockler.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googleapis.com *.bing.com *.hotjar.com *.clarity.ms *.trustedshops.com *.etrusted.com *.hatraco.net *.hatraco-shop.de *.criteo.com locator.uberall.com uberall.com static-prod.uberall.com api.mapbox.com; frame-ancestors 'self' *.etracker.com citizenwatch.eu de.citizenwatch.eu at.citizenwatch.eu ch.citizenwatch.eu nl.citizenwatch.eu fi.citizenwatch.eu; worker-src blob: 'self';
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups