maennergesundheitsportal.de

.de crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 916 ms crawled 2026-05-10

DE · 194.153.219.100 · AS6733 Bundesinstitut fuer Arzneimittel und Medizinprodukte (BfArM)

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Männergesundheitsportal – Fachlich geprüfte Gesundheitsinformationen für Männer
Description: Das Männergesundheitsportal des BIÖG bietet Männern ab 35 Jahren aktuelle und seriöse Informationen zu Themen wie Fitness, Ernährung, psychische Gesundheit, Gesunder Schlaf, Medikamente und Krebs.
Language: de
Generator: TYPO3 CMS
Canonical: https://www.maennergesundheitsportal.de/

Technology

Server: Apache

Third-party hosts loaded (1)

a9.com×1

Social

Registration

Updated

2025-05-08

Name servers

ns02.versatel.de.
ns1.dimdi.de.

DNS records live

NS

ns02.versatel.de
ns1.dimdi.de

MX

10 srv03mailgw.dimdi.de
10 srv04mailgw.dimdi.de

Verified for

HARICA

Email authentication partial

SPF: v=spf1 include:_spf1.bund.de include:_spf.bioeg.de include:_spf.bzga.de -all
strict (-all)
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:bioeg.de@dmarc.reports.bund.de
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

GEANT TLS RSA 1

from 2025-05-28 to 2026-05-28

Expires in 7 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.maennergesundheitsportal.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' data: https://piwik.bzga.de/ https://www.youtube-nocookie.com/ https://www.youtube.com/ ; frame-src *.frcapi.com 'self' https://www.youtube-nocookie.com/ https://www.youtube.com/
strict-transport-security: max-age=31536000; includeSubDomains; preload