lahr.de

.de crawl

First seen 2026-04-24 · Last seen 2026-05-18 · ok HTTP/1.1 200 14478 ms crawled 2026-05-18

DE · 185.166.21.210 · AS15817 Mittwald CM Service GmbH & Co. KG

Reputation 100/100

sector government type blog

HTML metadata

Title: Stadt Lahr - Startseite
Description: Lahr – die Stadt zwischen Schwarzwald und Reben – hat Einwohnern und Gästen einiges zu bieten. Eingebettet in die herrliche Landschaft, verwurzelt in ...
Language: de
Canonical: https://www.lahr.de/startseite.1.htm

Open Graph

url: https://www.lahr.de/startseite.1.htm
title: Stadt Lahr - Startseite
site name: Stadt Lahr - Startseite
description: Lahr – die Stadt zwischen Schwarzwald und Reben – hat Einwohnern und Gästen einiges zu bieten. Eingebettet in die herrliche Landschaft, verwurzelt in ...

Technology

Server: BunnyCDN-DE1-1331

Contact

Email

info@lahr.de

Registration

Updated

2018-11-06

Name servers

k1z01s003.kivbf.de.
k1z01s004.kivbf.de.
ns.frei.net.

DNS records live

NS

k1z01s003.kivbf.de
k1z01s004.kivbf.de
ns.frei.net

MX

10 mx6.kvnbw.de
10 mx7.kvnbw.de
10 mx8.kvnbw.de
10 mx9.kvnbw.de

TXT

apple-domain-verification=lS2Psl7g7fR2d02D
MS=3D12DE36E30AF91A2EE23C1E3614854FE8D1D45A

Email authentication strong

SPF: v=spf1 a ip4:87.234.219.197 ip4:92.60.15.1 ip4:92.60.15.3 ip4:92.60.15.11 ip4:217.22.192.244 ip4:81.109.161.67 include:spf.protect.kvnbw.de include:agenturserver.de include:_se_net.axiell.com include:_uk.axiell.com ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:abuse@lahr.de; ruf=mailto:abuse@lahr.de; fo=0:1;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-10 to 2026-08-08

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.lahr.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), usb=()
x-content-type-options: nosniff
content-security-policy: font-src 'self' *.aktion-mensch.de fonts.gstatic.com fonts.bunny.net data:; img-src 'self' *.lahr.de *.aktion-mensch.de *.lgl-bw.de *.geodatenzentrum.de api.service-digitale-verwaltung.de *.readspeaker.com cdn.stage.bio cdn.tomas-travel.com maps.googleapis.com maps.gstatic.com data:; style-src 'self' 'unsafe-inline' *.aktion-mensch.de api.service-digitale-verwaltung.de *.readspeaker.com twebshop.tomas-travel.com fonts.googleapis.com cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/ fonts.bunny.net shield-assets.b-cdn.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' piwik.lahr.de *.aktion-mensch.de api.service-digitale-verwaltung.de *.readspeaker.com *.musikschulverwaltung.de dashboard.stage.bio eveeno.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ ratgeber.co2online.de twebshop.tomas-travel.com cdnjs.cloudflare.com/ajax/libs/jquery/ cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/; connect-src 'self' piw
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin