gesund-aktiv-aelter-werden.de

.de crawl

First seen 2026-04-20 · Last seen 2026-05-20 · ok HTTP/1.1 200 708 ms crawled 2026-05-13

DE · 194.153.219.100 · AS6733 Bundesinstitut fuer Arzneimittel und Medizinprodukte (BfArM)

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Gesund aktiv älter werden: Startseite
Description: Das Onlineportal "Gesund & aktiv älter werden" bietet Informationen und Tipps für ein gesundes Älterwerden sowie Fachkenntnisse zur Gesundheits- und Bewegungsförderung.
Language: de-de
Generator: TYPO3 CMS
Canonical: https://www.gesund-aktiv-aelter-werden.de/

Technology

Server: Apache

Third-party hosts loaded (1)

a9.com×1

Social

Registration

Updated

2025-05-08

Name servers

ns02.versatel.de.
ns1.dimdi.de.
ns2.dimdi.de.

DNS records live

NS

ns02.versatel.de
ns1.dimdi.de
ns2.dimdi.de

MX

10 srv03mailgw.dimdi.de
10 srv04mailgw.dimdi.de

Verified for

HARICA

Email authentication partial

SPF: v=spf1 include:_spf1.bund.de include:_spf.bioeg.de include:_spf.bzga.de -all
strict (-all)
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:bioeg.de@dmarc.reports.bund.de
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS RSA 1

from 2025-05-29 to 2026-05-29

Expires in 8 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.gesund-aktiv-aelter-werden.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' data: https://piwik.bzga.de/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://youtu.be/ https://www.gesundheitliche-chancengleichheit.de/ https://shop.bzga.de/ ; frame-src *.frcapi.com 'self' https://www.youtube.com/ https://www.youtube-nocookie.com/ https://youtu.be/
strict-transport-security: max-age=31536000; includeSubDomains; preload