mannheim.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 874 ms crawled 2026-05-19

DE · 212.65.1.110 · AS21473 PFALZKOM GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Startseite | Mannheim.de
Language: de
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.mannheim.de/de/frontpage

Technology

Server: nginx
CMS: Drupal

Third-party hosts loaded (2)

int.botbucket.de×2
static.conword.io×1

Social

Registration

Updated

2025-12-09

Name servers

a.ns14.net.
b.ns14.net.
c.ns14.net.
d.ns14.net.

DNS records live

NS

a.ns14.net
b.ns14.net
c.ns14.net
d.ns14.net

MX

10 post2.mannheim.de
20 post1.mannheim.de

TXT

ciscocidomainverification=de9b8d1cc7d6e433fbda9f425ec41384c0f7dc2fddf971034d109765d2a036
a52cab0930a4fc3e515c001bb9913f26b7d82d8120cbb360144adfc8a13b4c3

Verified for

Apple
Cisco
Meta
Microsoft 365
Zoom

Email authentication partial

SPF: v=spf1 ip4:212.65.1.68 ip4:212.65.1.81 ip4:212.95.127.0/24 include:spf.protect.kvnbw.de include:spf.itebo.de include:ekom21.de mx -all
strict (-all)
DMARC: v=DMARC1; p=none; rua=mailto:postmaster@mannheim.de
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Certum Domain Validation CA SHA2

from 2025-08-13 to 2026-08-13

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.mannheim.de/de

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),payment=()
x-content-type-options: nosniff
content-security-policy: connect-src 'self' https://api.conword.io https://api.service-digitale-verwaltung.de https://eu-api.friendlycaptcha.eu https://maps.googleapis.com https://piwik.mannheim.de/ https://int.botbucket.de; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://api.service-digitale-verwaltung.de https://fonts.gstatic.com https://i.ytimg.com https://maps.googleapis.com https://maps.gstatic.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://static.conword.io https://api.service-digitale-verwaltung.de https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://demo04.km.usu.com https://polyfill-fastly.io https://unpkg.com https://piwik.mannheim.de/ https://int.botbucket.de; script-src-elem 'self' 'report-sample' 'unsafe-inline' https://maps.googleapis.com https://static.conword.io https://www.verbavoice.net https://api.service-digitale-verwaltung.de https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://demo04.km.usu.com http
strict-transport-security: max-age=31536000; includeSubDomains; preload