cww-paderborn.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-12 · ok HTTP/1.1 200 1888 ms crawled 2026-05-08

FR · 92.205.109.185 · AS21499 Host Europe GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: CWW Paderborn e.V.
Language: de
Generator: TYPO3 CMS
Canonical: https://www.cww-paderborn.de/

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (4)

a9.com×1
cdn.consentmanager.net×1
f1-eu.readspeaker.com×1
www.googletagmanager.com×1

Contact

Phone

Registration

Updated

2021-04-16

Name servers

ns1080.ui-dns.biz.
ns1084.ui-dns.de.
ns1087.ui-dns.org.
ns1091.ui-dns.com.

DNS records live

NS

ns1080.ui-dns.biz
ns1084.ui-dns.de
ns1087.ui-dns.org
ns1091.ui-dns.com

MX

0 mx00.kundenserver.de
10 mx01.kundenserver.de

Email authentication partial

SPF

v=spf1 a mx a:vfcp.de a:cww-paderborn.de ip4:93.241.42.184/29 ip4:78.94.87.1/29 ip4:217.91.48.17 ip4:194.25.134.16/29 ip4:194.25.134.80/29 ip4:80.150.6.137 ip4:80.150.6.143 ip6:2003:2:2:15:80:150:6:143 include:spf.crsend.com include:servers.mcsv.net include:_spf-eu.ionos.com include:spf.protection.outlook.com a:securesmtprelay.t-online.de mx:exchange.cww-paderborn.de ~all

softfail (~all)

DMARC

v=DMARC1; p=none; sp=none; rua=mailto:mail-admin@cww-paderborn.de!1m; rf=afrf; pct=100; ri=86400

policy: none (monitoring only) · sp=none

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

R12

from 2026-05-08 to 2026-08-06

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.cww-paderborn.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
permissions-policy: geolocation=(), midi=(), sync-xhr=(), accelerometer=(), gyroscope=(), magnetometer=(), camera=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com https://*.googletagmanager.com https:; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://f1-eu.readspeaker.com https://cdn.consentmanager.net https://vtdnntts-eu.readspeaker.com ; img-src 'self' data: https:; media-src 'self' https://app-eu.readspeaker.com https://rstts-eu.readspeaker.com https://media-eu.readspeaker.com https://vtdnntts-eu.readspeaker.com; child-src 'self' https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://*.google-analytics.com https://app-eu.readspeaker.com https://rstts-eu.readspeaker.com https://media-eu.readspeaker.com;
strict-transport-security: max-age=15552000; includeSubDomains; preload