hwk-konstanz.de

.de crawl

First seen 2026-04-22 · Last seen 2026-05-19 · ok HTTP/1.1 200 928 ms crawled 2026-05-15

DE · 185.181.132.62 · AS15817 Mittwald CM Service GmbH & Co. KG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Herzlich willkommen » Handwerkskammer Konstanz
Description: K. d. ö. R.
Language: de
Canonical: https://www.hwk-konstanz.de/

Open Graph

url: https://www.hwk-konstanz.de/
title: Herzlich willkommen - Handwerkskammer Konstanz
locale: de_DE
site name: Handwerkskammer Konstanz
description: K. d. ö. R.

Technology

Server: Apache
CMS: WordPress

Third-party hosts loaded (1)

hwk-konstanz.uniplus-software.de×1

Social

Contact

Email

info@hwk-konstanz.de

Phone

07531 205-0

Registration

Updated

2017-06-06

Name servers

ns1.odav.de.
ns2.odav.de.
ns3.odav.de.
ns4.odav.de.

DNS records live

NS

ns1.odav.de
ns2.odav.de
ns3.odav.de
ns4.odav.de

MX

10 mx01.hornetsecurity.com
20 mx02.hornetsecurity.com
30 mx03.hornetsecurity.com
40 mx04.hornetsecurity.com

TXT

45P5P4VL
2020042009422538vawr1ydbt28gs33qybbidk6uzryv627onm7cao6tyauh14ea
MS=45P5P4VL

Verified for

Atlassian
Google

Email authentication partial

SPF

v=spf1 ip4:91.198.224.0/24 ip4:194.37.255.0/24 Ip4:185.80.168.18 ip4:185.80.168.19 ip4:109.91.144.65 include:spf-de.emailsignatures365.com include:inxserver.com include:spf.protection.outlook.com include:spf.emailsys.net include:spf.hornetsecurity.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfU8N74k6lRlNlfORVGM31uHLh118WecbrBYQasUF/5Exx8zgNqbHaSl1WUuGbV6QwwbHjU6IlU9CycJ9KL9…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIA6F9cH5n1dL8MQyqO6+pt4PpW48mXyanaMQZMhiR4TkClV4Trm4qwnlMO4M2tUEtqx6KUpf8Loc6MwAlma…

selectors probed

Certificate (current)

R13

from 2026-04-16 to 2026-07-15

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.hwk-konstanz.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin
x-frame-options: deny
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://www.hwk-konstanz.de; img-src * data:; style-src 'self' 'unsafe-inline' https://*.b-ite.com/ https://fonts.googleapis.com/css https://api.signalize.com/ https://ai.uniplus-software.de/ http://localhost:3000/; script-src https://www.hwk-konstanz.de https://maps.googleapis.com/ https://www.instagram.com/ https://code.etracker.com/ https://api.signalize.com/ https://www.etracker.de/ https://*.b-ite.com/ https://www.google-analytics.com https://www.googletagmanager.com/ https://matomo.uniplus-software.de/matomo/matomo.js https://*.emailsys1a.net/ https://www.paypal.com/ https://speiseplanapp.de/snippet/spAppWebSnipv3.js 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://api.signalize.com/ https://fonts.gstatic.com/; frame-src 'self' https://share.uniplus-software.de/ https://t921c9cab.emailsys1a.net/ https://www.youtube-nocookie.com/ https://www.youtube.com/ https://www.instagram.com/ https://vimeo.com/ https://www.paypal.com/ https://www.sandbox.payp
strict-transport-security: max-age=31536000; includeSubDomains