harzenergie.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1046 ms crawled 2026-05-19

DE · 80.237.243.87 · AS61157 PlusServer GmbH

Reputation 64/100 wrong cert weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Harz Energie - Ihr regionaler Energieversorger
Description: Strom, Erdgas, Wärmestrom, Heizung, Photovoltaik, E-Mobilität und vieles mehr. Umfassende Beratung in 11 Kundenzentren direkt vor Ort. 💡💧🚗
Language: de
Canonical: https://www.harzenergie.de

Open Graph

url: https://www.harzenergie.de
title: Harz Energie - Ihr regionaler Energieversorger
site name: Harz Energie
description: Strom, Erdgas, Wärmestrom, Heizung, Photovoltaik, E-Mobilität und vieles mehr. Umfassende Beratung in 11 Kundenzentren direkt vor Ort. 💡💧🚗

Technology

Server: Apache
CMS: Gatsby

Third-party hosts loaded (2)

fonts.stadtwerke-ssl.de×2
sswsp.conergos.de×1

Social

Contact

Phone

Registration

Updated

2021-08-28

Name servers

ns1.telekom.net.
pns.dtag.de.

DNS records live

NS

ns1.telekom.net
pns.dtag.de

MX

10 mx-in01.eu.retarus.com
10 mx-in02.eu.retarus.com

TXT

_telesec-domain-validation=358565_2026-03-18_eOqBBbLVopE7Fb0Al9VbXDNcNbG8OXD77CVFOgJxjOOiNi7LoU
MS=DD240A8896BE54E4FBC17A72702C8CEE9D9B9D9B
swisssign-check=0Yu8Xv3rpbbTbcMhIIp4en0UFdM

Verified for

Apple
Brevo
Cisco
Google

Email authentication partial

SPF

v=spf1 include:_spf.smartservice.de include:gipsprojekt.de include:_spf.retarus.com include:_spf.general.transactional-mail-a.com include:spf.protection.outlook.de include:spf.flowmailer.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@inbound.flowmailer.net; ruf=mailto:dmarc@inbound.flowmailer.net; fo=1

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current) wrong cert

Telekom Security ServerID OV Class 2 CA

from 2025-06-02 to 2026-06-07

Expires in 17 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.harzenergie.de/

present

x-content-type-options

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff