cw-mobile.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 3480 ms crawled 2026-05-19

US · 104.26.10.68 · AS13335 Cloudflare, Inc.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title: cw-mobile.de | Unterhaltungselektronik Shop: Smartphones, Drucker, Multimedia, Zubehör günstig kaufen
Description: Drucker ✓ Scanner ✓ Tablet-PC ✓ Handy ✓ Business-Notebook ✓ kaufen Sie günstig im Onlineshop von cw-mobile.de. Zertifiziert von Trusted Shops!
Language: de
Canonical: https://www.cw-mobile.de

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (2)

static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+49 (0) 8552 / 97411- 150

Registration

Updated

2023-04-24

Name servers

amanda.ns.cloudflare.com.
jeff.ns.cloudflare.com.

DNS records live

NS

amanda.ns.cloudflare.com
jeff.ns.cloudflare.com

MX

10 cwmobile-de0e.mail.protection.outlook.com

TXT

Show 4 TXT records

ca3-059d578ad60a4cd8a0c5b399632116e1
sophos-domain-verification=a24df939acec603b90b0a42829ad2c68d2f3112cb2f39e78d5a86418f1313894
_globalsign-domain-verification=OpLoJIQh6Siq8Og4FUPiL4hfTAABDovSsQrowjBq-f
MS=ms16635058

Email authentication weak

SPF: v=spf1 ip4:46.20.47.179 ip4:80.152.232.221 ip4:80.151.112.73 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-24 to 2026-06-22

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.cw-mobile.de/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy-report-only: font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardina