kaldewei.de

HTML metadata

Title

KALDEWEI – Ihr Partner für hochwertige Badlösungen

Description

KALDEWEI ist Ihr weltweiter Partner für Badlösungen ✔ Duschflächen, Waschtische, Badewannen ✔ aus KALDEWEI Stahl-Emaille ➤ KALDEWEI entdecken!

Language

de

Generator

TYPO3 CMS

Canonical

https://www.kaldewei.de/

Translations

cs
de
de-ch
en
en-gb
en-us
es
fr
fr-ch
it
it-ch
nl
pl
ru
zh

Technology

Server: Apache

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (18)

assets.cdn.kaldewei.com×15
images.cdn.kaldewei.com×9
www.kaldewei.ch×3
app.usercentrics.eu×1
files.cdn.kaldewei.com×1
www.google.com×1
www.googletagmanager.com×1
www.kaldewei.cn×1
www.kaldewei.co.uk×1
www.kaldewei.com×1
www.kaldewei.cz×1
www.kaldewei.es×1
www.kaldewei.fr×1
www.kaldewei.it×1
www.kaldewei.nl×1
www.kaldewei.pl×1
www.kaldewei.ru×1
www.kaldewei.us×1

Registration

Updated

2014-02-10

Name servers

a.regfish-ns.net.
b.regfish-ns.net.
c.regfish-ns.net.

DNS records live

NS

a.regfish-ns.net
b.regfish-ns.net
c.regfish-ns.net

MX

10 kaldewei-de.mail.protection.outlook.com

TXT

KVwUlUIp2IVa4+Y9LKrrI+8xVJ+Ew6JTQmfXmL4BzyNdMuU+0AUIAFvEHEV9zCL2c8jj5xe1xi8JaciwQ3Ajgg==
SFMC-tl3gKGjgQccNN5225nLdRexFxIo14gxJ-pBeIS2T
4355cfd7d7366153c3cfedaac16fc1e2cb1dccdb6ef6a21cc6a3902c2baa6f11

Email authentication strong

SPF

v=spf1 a ip4:83.246.89.68/32 ip4:78.94.147.82 ip4:212.211.225.85/32 ip4:212.211.215.95/32 ip4:212.211.215.96/32 ip4:62.55.182.68/32 include:spf.protection.outlook.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@kaldewei.com; ruf=mailto:dmarc

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7JtExODAlXHOQRKIGgcMECaXpAE9bRF3sl/BDhNMk0z9uyNc46OKz/q58Z6uKQbrqneWkaaaPj3G4XPaA/R…

selectors probed

Certificate (current)

R13

from 2026-03-15 to 2026-06-13

Expires in 25 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.kaldewei.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' c.a.kaldewei.com assets.cdn.kaldewei.com staging.cdn.kaldewei.de kald1.secure2.footprint.net kald-a1.secure2.footprint.net kald-b1.secure2.footprint.net kaldewei-fa1.secure.footprint.net kald.secure2.footprint.net kald-a.secure2.footprint.net kald-b.secure2.footprint.net kaldewei-fa.secure.footprint.net https://www.kaldewei.de *.kaldewei.de https://www.kaldewei.com http://test-lieferzeitenauskunft.kaldewei.de test-lieferzeitenauskunft.kaldewei.de lieferzeitenauskunft.kaldewei.de *.hotjar.com tagmanager.google.com www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com jwpsrv.com www.polantis.com maps.googleapis.com maps.gstatic.com bat.bing.com https://interaktiv.contilla.de/15012d2d2e303369c8628723/0/webapp.js https://www.recaptcha.net/recaptcha/api.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/206776544034462 https://connect.facebook.net/signals/config/169033072170
strict-transport-security: max-age=31536000; includeSubDomains