mega-monheim.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-11 · ok HTTP/1.1 200 791 ms crawled 2026-05-07

DE · 185.96.197.9 · AS57353 vitroconnect GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: MEGA - Monheimer Elektrizitäts- und Gasversorgung GmbH
Description: Ihr Dienstleister für Strom, Erdgas, Multimedia und E-Mobilität in Monheim am Rhein.
Language: de-DE
Generator: TYPO3 CMS
Canonical: https://www.mega-monheim.de/

Open Graph

title: MEGA - Monheimer Elektrizitäts- und Gasversorgung GmbH
image:url: https://www.mega-monheim.de/fileadmin/_processed_/e/5/csm_hero-glasfaser-01_6ef4d84bcf.jpg
description: Ihr Dienstleister für Strom, Erdgas, Multimedia und E-Mobilität in Monheim am Rhein.

Technology

Server: nginx

Social widgets

YouTube Embed

Third-party hosts loaded (2)

www.youtube-nocookie.com×7
static.conword.io×3

Social

Contact

Email

service@mega-monheim.de

Phone

Registration

Updated

2015-06-17

Name servers

ns01.versatel.de.
ns02.versatel.de.
ns03.versatel.de.

DNS records live

NS

ns01.versatel.de
ns02.versatel.de
ns03.versatel.de

MX

10 mail.monheim.de

TXT

Show 5 TXT records

MS=55618FF24ECDBBB8757D97F4B0FEAE396153E95C
swisssign-check=7MVb-6YXz5i_2hM27rp47lHyOcY
QuoVadis=13bb95ec-b101-4b7d-8dc1-3f06210a57f7
MS=ms84512215
asv=a2638f485d5a57322a3a999dbd7ec873

Email authentication partial

SPF: v=spf1 ip4:185.96.197.0/27 ip4:80.237.133.178 ip4:193.158.93.136 ip4:176.94.174.107 ip4:194.45.33.66 ip4:194.45.33.166 ip4:195.201.0.218 ip4:153.100.8.31 ip4:153.100.8.32 ip4:178.212.73.50 include:agenturserver.de include:_spf1.mega-monheim.de -all
strict (-all)
DMARC: v=DMARC1;p=none;sp=none
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-02-27 to 2027-03-06

Expires in 291 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mega-monheim.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; style-src 'self' 'unsafe-inline' https://unpkg.com https://hcaptcha.com https://*.hcaptcha.com https://journeyengine.staging.wlp.cloud; script-src 'self' 'unsafe-inline' https://*.journey.epilot.io https://*.youtube.com https://hcaptcha.com https://*.hcaptcha.com https://journeyengine.staging.wlp.cloud https://static.conword.io/ https://unpkg.com https://www.google-analytics.com *.googletagmanager.com; img-src 'self' data: https://s.ytimg.com https://www.google-analytics.com https://api.mapbox.com https://static.conword.io/ https://journeyengine.staging.wlp.cloud; media-src 'self'; font-src 'self' data:; frame-src 'self' https:; form-action 'self'; connect-src 'self' https://www.google-analytics.com https://hcaptcha.com https://*.hcaptcha.com https://nominatim.openstreetmap.org https://api.conword.io/ https://*.google-analytics.com https://journeyengine.staging.wlp.cloud https://experiences-bff.staging.wlp.cloud; manifest-src 'self'; frame-ancestors 'none'; base-uri
strict-transport-security: max-age=31536000