kita-zweckverband.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 8006 ms crawled 2026-05-19

DE · 3.75.138.64 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: KiTa Zweckverband
Language: de
Generator: TYPO3 CMS
Canonical: https://www.kita-zweckverband.de/

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Registration

Updated

2018-02-27

Name servers

ns5.kasserver.com.
ns6.kasserver.com.

DNS records live

NS

ns5.kasserver.com
ns6.kasserver.com

MX

10 mail.rz-essen.de

Verified for

Brevo

Email authentication partial

SPF

v=spf1 mx ip4:217.6.27.83 ip4:3.75.138.64 include:spf.mailjet.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

from 2026-04-01 to 2026-06-30

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.kita-zweckverband.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' ; img-src 'self' data: https://*.pxia.de https://www.kita-zweckverband.de https://ip-172-26-9-237 https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://*.google.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.bootstrapcdn.com https://fonts.googleapis.com/css/ https://*.bootstrapcdn.com https://*.pxia.de https://ip-172-26-9-237 https://consent.cookiebot.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://*.google.com https://*.bootstrapcdn.com https://*.googleapis.com; script-src-elem 'self' 'unsafe-inline' blob: https://www.google-analytics.com/analytics.js https://*.bootstrapcdn.com https://fonts.googleapis.com/css/ https://*.google.com https://consent.cookiebot.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://*.bootstrapcdn.com https://*.googleapis.com https://*.gstatic.com; style-src 'self' 'unsafe-inline' https://*.go
strict-transport-security: max-age=31536000; includeSubDomains