jugend-staerken.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2024 ms crawled 2026-05-19

DE · 185.49.17.236 · AS25516 init AG fuer digitale Kommunikation

Reputation 92/100 no dmarc policy

sector nonprofit type landing page

HTML metadata

Title: Startseite - JUGEND STÄRKEN
Language: de

Open Graph

url: https://www.jugend-staerken.de/just
title: JUGEND STÄRKEN
site name: JUGEND STÄRKEN

Technology

Server: Varnish

Registration

Updated

2021-08-02

Name servers

ns81.domaincontrol.com.
ns82.domaincontrol.com.

DNS records live

NS

ns81.domaincontrol.com
ns82.domaincontrol.com

MX

100 mxlb.ispgateway.de

TXT

5km9g3jk70jli9u48etskkpndo

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2025-05-08 to 2026-05-30

Expires in 10 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.jugend-staerken.de/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: child-src blob: ; style-src 'self' 'unsafe-inline' https://*.bmfsfj.de https://*.bmbfsfj.bund.de https://*.stry.tl ; connect-src 'self' https://*.bmfsfj.de https://*.bmbfsfj.bund.de https://analytics.init.de https://api.fbanalytics.org https://eu.frcapi.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' https://*.bmfsfj.de https://*.bmbfsfj.bund.de https://*.stry.tl https://analytics.init.de https://cdn.jsdelivr.net/npm/ ; worker-src blob: ; media-src 'self' blob: data: https://*.bmfsfj.de https://*.bmbfsfj.bund.de https://*.streamfarm.net ; frame-src 'self' https://*.bmfsfj.de https://*.bmbfsfj.bund.de https://*.video.taxi https://*.stry.tl https://eu.frcapi.com ; frame-ancestors 'self' https://*.bmfsfj.de https://*.bmbfsfj.bund.de ; img-src 'self' data: 'unsafe-inline' https://*.bmfsfj.de https://*.bmbfsfj.bund.de https://*.stry.tl https://strytl.blob.core.windows.net ; default-src 'self' blob: ; font-src 'self' data: https://*.bmfsfj.de https://*.bmbfsfj.bund.d
strict-transport-security: max-age=31536000; includeSubDomains; preload;, max-age=31536000 ; includeSubDomains