indexo.dev

kwbkoeln.de

.de crawl

First seen 2026-06-01 · Last seen 2026-06-02 · ok HTTP/1.1 200 455 ms crawled 2026-06-02

DE · 78.35.1.162 · AS8422 NetCologne Gesellschaft fur Telekommunikation mbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Home
Language
de-DE

Technology

Stack
ASP.NET

Third-party hosts loaded (1)

  • download.digiaccess.org×1

Social

Contact

Email

Registration

Updated
2018-01-16
Name servers
  • ns10.inch-media.de.
  • ns11.inch-media.de.
  • ns12.inch-media.de.
  • ns13.inch-media.de.

DNS records live

NS
  • ns10.inch-media.de
  • ns11.inch-media.de
  • ns12.inch-media.de
  • ns13.inch-media.de
MX
  • 10 mx01.hornetsecurity.com
  • 20 mx02.hornetsecurity.com
  • 30 mx03.hornetsecurity.com
  • 40 mx04.hornetsecurity.com
TXT
  • 5f1qh6chappa8tp9uh5eh0kdl9
Verified for
  • Microsoft 365

Email authentication partial

SPF
v=spf1 a mx include:spf.hornetsecurity.com include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=none; pct=100
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-11-25 to 2026-12-27
Expires in 207 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://kwbkoeln.de/

present
  • content-security-policy
  • x-frame-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy
default-src 'self' https://www.youtube.com https://www.google-analytics.com https://maps.googleapis.com https://www.google.com https://stats.g.doubleclick.net https://login.doccheck.com https://widget.thefork.com https://download.digiaccess.org https://api.digiaccess.org https://module.lafourchette.com; script-src 'self' 'nonce-kiwnrkWP+hQ518LKMaDH5A==' 'unsafe-eval' https://maps.googleapis.com https://www.google-analytics.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://download.digiaccess.org https://widget.thefork.com; script-src-elem 'self' 'unsafe-inline' https://maps.googleapis.com https://www.google-analytics.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://

Links to (5)

Linked from (2)