ewg-garching.de

.de crawl

First seen 2026-04-20 · Last seen 2026-05-17 · ok HTTP/1.1 200 12543 ms crawled 2026-05-13

FI · 135.181.13.140 · AS24940 Hetzner Online GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Fernwärme der Energie-Wende-Garching
Description: Der lokale Energieversorger im Stadtgebiet Garching für Fernwärme auf Basis nachhaltiger Geothermiewärme - Energie-Wende-Garching GmbH.
Language: de
Canonical: https://www.ewg-garching.de/

Technology

Server: nginx
CMS: Gatsby

Contact

Email

info@ewg-garching.de

Phone

Address

Schleissheimer Str. 91, 85748, Garching, DE

Registration

Updated

2026-02-16

Name servers

a.ns14.net.
b.ns14.net.
c.ns14.net.
d.ns14.net.

DNS records live

NS

a.ns14.net
b.ns14.net
c.ns14.net
d.ns14.net

MX

10 ewggarching-de0i.mail.protection.outlook.com

TXT

MS=ms74930693
_INVALIDv=spf1 include:spf.protection.outlook.com include:80.152.132.208 -all

Email authentication weak

SPF

not published

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynOulFQkSVCtZmMYY1uE4eZf7F8EphMjiXf3xv2zjp+2uh4/kAMJOhOR0eY8ZPFNT3yfh6gVFy5pNI…

selectors probed

Certificate (current)

from 2026-04-13 to 2026-07-12

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.ewg-garching.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin, strict-origin-when-cross-origin
x-frame-options: deny
x-content-type-options: nosniff
content-security-policy: img-src 'self' data: assets.ewg-garching.de i.ytimg.com *.tile.openstreetmap.org; script-src 'self' 'nonce-RELQb97sRct9n9dDH1OoYg==' assets.ewg-garching.de; default-src 'none'; frame-src www.youtube-nocookie.com/embed/www.tagesschau.de/multimedia/video/ *.zdf.de/miniplayer/embed/; media-src assets.ewg-garching.de; manifest-src 'self' assets.ewg-garching.de; script-src-elem 'self' 'unsafe-inline' assets.ewg-garching.de ajax.googleapis.com/ajax/libs/jquery; style-src 'self' 'nonce-RELQb97sRct9n9dDH1OoYg==' assets.ewg-garching.de; connect-src 'self' assets.ewg-garching.de/media/gridmap/ localhost:3000/; script-src-attr 'self' 'unsafe-inline'; upgrade-insecure-requests; font-src 'self' data: assets.ewg-garching.de; report-uri https://wd.lotx.de/csp-report/
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin