johanngeorgenstadt.de

HTML metadata

Title

Startseite | Bergstadt Johanngeorgenstadt

Language

de

Generator

CMS ionas4

Canonical

https://www.johanngeorgenstadt.de/startseite/

Translations

cs
de
en

Open Graph

url: https://www.johanngeorgenstadt.de/startseite/
title: Startseite
locale: de_DE
site name: Bergstadt Johanngeorgenstadt

Technology

Server: Apache

Contact

Email

888-222touristinfo@johanngeorgenstadt.de

Phone

03773888254

Registration

Updated

2026-04-15

Name servers

ns1.first-ns.de.
robotns2.second-ns.de.
robotns3.second-ns.com.

DNS records live

NS

ns1.first-ns.de
robotns2.second-ns.de
robotns3.second-ns.com

MX

10 mail.kabeljournal.de

Email authentication strong

SPF

v=spf1 mx include:_spf.hetzner.com include:secure-server.net ip4:188.138.10.197 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; adkim=s; aspf=s

policy: quarantine

DKIM

default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMqrhxh2/go9efiWxSWUIrCtaZclXcfLsxH2ZZq6ii5rf5TXsAXFqiEZZmXBkBctqgtgrvF8fv/QTEfui1LiT…

selectors probed

Certificate (current)

E8

from 2026-04-16 to 2026-07-15

Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.johanngeorgenstadt.de/startseite/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; child-src 'self' blob: https://kb.ionas.de/; connect-src 'self' https://*.egovernor.de/; font-src 'self' data:; frame-ancestors 'self' https://www.johanngeorgenstadt.de; frame-src 'self' https://iam.chamaeleon.de/ https://www.johanngeorgenstadt.de; form-action 'self'; img-src 'self' data: https://*.egovernor.de/ https://tiles.chamaeleon.de https://www.johanngeorgenstadt.de; manifest-src 'self'; media-src 'self'; object-src 'self' https://www.johanngeorgenstadt.de; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; report-to main
strict-transport-security: max-age=31536000