koestritzer.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-18 · ok HTTP/1.1 200 1165 ms crawled 2026-05-07

DE · 185.171.216.144 · AS61157 PlusServer GmbH

Reputation 100/100

sector food type homepage

HTML metadata

Title: Köstritzer: Deutschlands beliebtestes Schwarzbier
Description: Entdecke die Welt von Köstritzer Schwarzbier. Erfahre mehr über unsere Geschichte, unsere Biere und aktuelle Neuigkeiten.
Language: de
Canonical: https://www.koestritzer.de/

Open Graph

url: https://www.koestritzer.de/
title: koestritzer
description: Entdecke die Welt von Köstritzer Schwarzbier. Erfahre mehr über unsere Geschichte, unsere Biere und aktuelle Neuigkeiten.

Technology

Server: nginx
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (3)

bitburger-group.bynder.com×7
code.etracker.com×1
www.googletagmanager.com×1

Social

Registration

Updated

2025-02-02

Name servers

ns1.telekom-domains.de.
ns2.telekom-domains.de.

DNS records live

NS

ns1.telekom-domains.de
ns2.telekom-domains.de

MX

0 koestritzer-de.mail.protection.outlook.com

TXT

QT4RM196IEldaUu/lAcx7t1Ywcw9u5ytfnXIvVw0QFcuffpr7eZQHHmWREqJfvNyClq35xvSOeSKwI8E8JTgNQ==
bmsw7c7kn5bxjf6xrq8cctf2pnsmhlsv

Verified for

Atlassian
DocuSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 mx ip4:213.221.92.251 ip4:91.198.224.31 ip4:194.37.255.31 include:spf.protection.outlook.com include:spf3.k1net.de include:inxserver.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email,mailto:dmarc.aggregate@bitburger-braugruppe.de; fo=1

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgBaBLE3G4iaZWtWOn7Z3XmaNGo4jMfH78EaE002adETw+YLEV7035dDmbOPe2JQafRWnH+NT+bRJAGYGEHc…

selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-10-20 to 2026-10-20

Expires in 152 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.koestritzer.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: sync-xhr=(self),geolocation=(self),midi=(),microphone=(),camera=(self),magnetometer=(),gyroscope=(),payment=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:
strict-transport-security: max-age=31536000; includeSubDomains