izrd.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-16 · ok HTTP/1.1 200 5185 ms crawled 2026-05-07

US · 172.66.157.195 · AS13335 Cloudflare, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Interdisziplinäres Zentrum für Radikalisierungsprävention und Demokratieförderung e.V. - IZRD

Language

Canonical

https://www.izrd.de/de/

Translations

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (1)

static.cloudflareinsights.com×1

Social

Registration

Updated

2026-02-27

Name servers

diana.ns.cloudflare.com.
watson.ns.cloudflare.com.

DNS records live

NS

diana.ns.cloudflare.com
watson.ns.cloudflare.com

MX

10 izrd-de.mail.protection.outlook.com

TXT

Show 4 TXT records

sophos-domain-verification=329a09393bdfbc4d6409649a769ea9ba577ae8e21de10d1b55162e404ef98154
MS=ms94036570
brevo-code:36aaffb993360c88ff9675b106da0121
factorial-domain-verification=gLr6yQEWdCnfUkxX8AEtGg5iELbA3N7vivK4wzYYZ2qrvh7CW3LKrJD31kWKjFsc

Email authentication strong

SPF

v=spf1 ip4:88.99.161.205 ip6:2a01:4f8:10a:320d::/64 include:spf.protection.outlook.com include:spf.brevo.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:5a026016f4144a79863d5d4ec0c3698a@dmarc-reports.cloudflare.net,mailto:re+vo3itzhy61v@dmarc.postmarkapp.com; sp=none; aspf=r;

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gMaP/pmeUmWmDjGVPrEnOx+QewOgPa6rv8tNR3S83XqRGo7pnHtQvZv7ZlOcXaIrucXpLFkB2oIqg…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xGla5QN1FtGollkHUWl0/+6OmpecHpehlrDJK4LZc9tnO8vkDHIMlxEqZl8wCqeMKqJt5iZMtMaS6…

selectors probed

Certificate (current)

from 2026-04-28 to 2026-07-27

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.izrd.de/de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' https:; connect-src 'self' https:;
strict-transport-security: max-age=15552000