enbw.com

HTML metadata

Title: Ihr Energieanbieter für Strom, Gas und Elektromobilität | EnBW
Description: EnBW ist ein bundesweit ausgezeichneter Ökostrom- und Gasanbieter sowie der größte E-Mobilitätsanbieter Deutschlands. Wechseln Sie jetzt!
Language: de-DE
Canonical: https://www.enbw.com/

Technology

Server: Kestrel
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (2)

images.ctfassets.net×10
www.googletagmanager.com×1

Social

Registration

Registrar

COREhub, S.R.L.

Created

1997-12-15

Expires

2026-12-14 208 days left

Updated

2025-12-15

Name servers

nss01.enbw.com
nss02.enbw.com
nss03.enbw.com
nss04.enbw.com

DNS records live

NS

nss01.enbw.com
nss02.enbw.com
nss03.enbw.com
nss04.enbw.com

MX

10 enbw-com.mail.protection.outlook.com

TXT

Show 22 TXT records

_n0bpjf3evjlhit0xe6cw9aoi46ijp8o
mongodb-site-verification=wx1hEqAfga3oDOLxbBMgCRmkJaC3qnJZ
atlassian-domain-verification=WMXmAeNa7A0HN9CUCYkWib3FdEQxzzxsRmTt9gmOYZ7xBlTpPtqbYUo9nn3gxJih
docker-verification=c9dda177-b237-4f35-92f5-af2d0c31aef9
ciscocidomainverification=42746b1e185255a97e49f9b3556832feb3f29a110513d425e6e7f8aea968c953
jamf-site-verification=-AIgJ_-hJZhCFObUSYBYPg
MS=ms99650276
74008C1F34
facebook-domain-verification=ydjlxkasnq7hwb26ab4xy6i3r0ku4i
swisssign-check=SL39zBpUDOh7NQeivhPF94nReu4
MS=ms90050993
samsung-domain-verification=5059994a-614d-4540-8708-03e2286fddad
_801lr6t5xhy6bu62ec06kp3nvvcces9
atlassian-domain-verification=bwrLK74Saiok3V7RKqpVLIlcgN2YZ7bmhBJYt0HGZI3DFlNis7GzoN0qcOJVfg8n
canva-site-verification=rzbGZ7nSJoKcXxicxYG_VA
5rP4k9n/XxQWHT51VckC8joE0OfTRAbxEfEV9Hx4uKOUo7ZPPHSk9ITxgpyPtS4/8Ep8C9X7dLF27CRz0zvF8g==
apple-domain-verification=bNV0Zo99pUYsma0C
QuoVadis=ff75b4e2-bf62-453f-9e18-a9ef558db0ec
google-site-verification=eKb4l2ZAnuRGbOUCUYt4VpJe19lbO1MNiyZU6owEl4o
4j4mr9pmb3250phbvwb6d3phbkbvpyjr
d365mktkey=68rygjz68hap29ohpu88bxzv8
swisssign-check=ape7ZmpfOLv10a98bFXR5xTRjJ4

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZg7x/UQ1kLPYFB0UcubWrWt5/uJjAo7YFWI4eFrAi/rJB/vfDwN5VSCnnvjDHZmMYYxIAxOpeWVja…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPPfPVZv1Ql464C15wZFOjsqgRIlkKKFtgUdSd6yonzUvcUuvAVUL/DqE1k9W/Kcm2pg4WZAztr3Q+…
mail: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38zhABDxJmLKJwA0vfQcJmrcyQ936C9jtfLrYw6NmFk788ORXuD/FSdNUO7egX623LRYp84B3M9s70…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9EUyoIRdm1suGkpP6meTtHwgcRI6xMOO0+WMN9YCyqjP1ZlFzGPnTHX/qg0QywSsKu1tYd/VBwLWLmG0Y…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv204Y8ItYav5zL1P097m7tmxJCF539Rnp9/rSzWruG/L7cr+6bjRIMX2/iFDaBWzIfz63YOm0PUQu2kdGnEsZfp…

selectors probed

Certificate (current)

Thawte TLS RSA CA G1

from 2026-02-20 to 2027-03-20

Expires in 304 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.enbw.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: fullscreen=*, geolocation=*, autoplay=self, sync-xhr=self, accelerometer=(), ambient-light-sensor=(), camera=(), interest-cohort=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), speaker=(), usb=(), vr=()
x-content-type-options: nosniff
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https: 'strict-dynamic' 'report-sample' 'nonce-2090fSfydXXZvMK+eZinSzg8';object-src 'none';style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https: blob:;media-src 'self' https:;frame-src 'self' https:;font-src 'self' data: https:;connect-src 'self' https: wss:;base-uri 'none';frame-ancestors 'self' https://app.contentful.com;report-uri /api/report/csp
strict-transport-security: max-age=31536000