morgenwald.org

.org crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 22217 ms crawled 2026-05-17

DE · 188.245.147.227 · AS24940 Hetzner Online GmbH

Reputation 67/100 listed in spam blocklist no dmarc policy

sector nonprofit type homepage

HTML metadata

Title: Morgenwald Stiftung | für einen lebendigen Wald und eine gesunde Umwelt - Morgenwald
Language: de
Generator: Contao Open Source CMS
Canonical: https://www.morgenwald.org/

Technology

Server: Apache

Social

Registration

Registrar

IONOS SE

Created

2022-04-07

Expires

2027-04-07 323 days left

Updated

2026-04-07

Name servers

helium.ns.hetzner.de
hydrogen.ns.hetzner.com
oxygen.ns.hetzner.com

DNS records live

NS

helium.ns.hetzner.de
hydrogen.ns.hetzner.com
oxygen.ns.hetzner.com

MX

0 morgenwald-org.mail.protection.outlook.com

TXT

MS=ms83353998

Email authentication weak

SPF: v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-12 to 2026-07-11

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.morgenwald.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=(), autoplay=(self),camera=(),fullscreen=(self),geolocation=(),microphone=(),payment=()
x-content-type-options: nosniff
content-security-policy: font-src 'self' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com analytics.tacke-marketing.de; style-src 'self' 'unsafe-inline'; img-src 'self' googletagmanager.com data:;frame-src 'self' analytics.tacke-marketing.de; connect-src 'self' blob: www.googletagmanager.com
strict-transport-security: max-age=31536000; includeSubDomains; preload