herrsching.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-11 · ok HTTP/1.1 200 478 ms crawled 2026-05-07

DE · 134.119.0.6 · AS34011 Host Europe GmbH

Reputation 92/100 no dmarc policy

sector government type homepage

HTML metadata

Title

Startseite | Gemeinde Herrsching

Language

de-DE

Generator

cEasy 5.3.5 (10081) by hitcom new media gmbh [www.hitcom.de]

Canonical

https://www.herrsching.de/willkommen

Translations

de-de

Technology

Server: nginx

Third-party hosts loaded (1)

ccm.ceasy.de×1

Social

Contact

Phone

+4981523740

Registration

Updated

2023-05-22

Name servers

ns57.domaincontrol.com.
ns58.domaincontrol.com.

DNS records live

NS

ns57.domaincontrol.com
ns58.domaincontrol.com

MX

10 mail1.donotspam.de
20 mail3.donotspam.de
30 mail2.donotspam.de
40 mail4.donotspam.de

TXT

73bhf4qib11s0aevk5a7q7fl5l
swisssign-check=1jYhDkFC83m3fOs_DI4P0FWYMUU

Email authentication weak

SPF: v=spf1 include:_spf.donotspam.de include:ispgateway.de include:_spf.formcentric.com a mx -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2025-11-06 to 2026-12-01

Expires in 196 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.herrsching.de/willkommen

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), midi=(), camera=(), usb=(), magnetometer=(), accelerometer=(), vr=(), speaker=(), ambient-light-sensor=(), gyroscope=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' herrsching.de *.herrsching.de stellwerk-herrsching.de *.stellwerk-herrsching.de *.ceasy.de data: 'unsafe-inline' https:; form-action 'self' *.herrsching.de *.stellwerk-herrsching.de; object-src 'none'; frame-ancestors 'self'; script-src data: blob: 'unsafe-inline' 'unsafe-eval' https:; base-uri 'self' herrsching *.herrsching.de stellwerk-herrsching *.stellwerk-herrsching.de *.ceasy.de
strict-transport-security: max-age=2592000