gemeinsam-vielfalt-leben.de

.de crawl

First seen 2026-05-08 · Last seen 2026-05-19 · ok HTTP/1.1 200 2431 ms crawled 2026-05-15

DE · 85.13.138.53 · AS34788 Neue Medien Muennich GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Home | Christophorus-Werk Lingen e.V.
Description: Home •
Language: de

Open Graph

title: Home | Christophorus-Werk Lingen e.V.
description: Home •

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Email

info@christophorus-werk.de

Phone

0591 9142-0

Registration

Updated

2026-02-05

Name servers

ns3.ai-dns.de.
ns5.kasserver.com.
ns5.name-server-kas.de.
ns6.kasserver.com.

DNS records live

NS

ns3.ai-dns.de
ns5.kasserver.com
ns5.name-server-kas.de
ns6.kasserver.com

MX

10 w00ccbaa.kasserver.com

Email authentication weak

SPF: v=spf1 mx a include:spf.nl2go.com ip4:62.55.182.68 -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV E36

from 2026-05-08 to 2026-11-23

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://gemeinsam-vielfalt-leben.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: same-origin
x-frame-options: sameorigin, SAMEORIGIN
permissions-policy: notifications=(self), push=(self)
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' www.youtube-nocookie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' api-free.deepl.com *.googleapis.com secure.pay1.de *.googletagmanager.com *.youtube.com secure.pay1.de api.deepl.com api-free.deepl.com; connect-src 'self' api-free.deepl.com *.googleapis.com pro.ip-api.com *.google-analytics.com api.deepl.com api-free.deepl.com pro.ip-api.com; style-src 'self' 'unsafe-inline' *.googleapis.com cdnjs.cloudflare.com *.googletagmanager.com; img-src 'self' maps.gstatic.com img.youtube.com i.ytimg.com *.googleapis.com data: blob: *.gstatic.com i.ytimg.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com data:; frame-src 'self' secure.pay1.de www.youtube-nocookie.com *.googletagmanager.com *.youtube.com secure.pay1.de www.youtube-nocookie.com; media-src 'self'; base-uri 'self'; form-action 'self';, frame-ancestors 'self'
strict-transport-security: max-age=15768000;includeSubDomains
cross-origin-opener-policy: same-origin