museen-in-bayern.de

.de crawl

First seen 2026-04-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 1552 ms crawled 2026-05-11

DE · 78.46.153.198 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title

Bayerns Museen entdecken! - Museen in Bayern

Description

Bayern ist eine der reichsten deutschen Museumslandschaften. Über 1.300 Museen, Schlösser und aktuelle Ausstellungen warten auf euch!

Language

de-DE

Generator

TYPO3 CMS

Canonical

https://museen-in-bayern.de/

Translations

Open Graph

title: Bayerns Museen entdecken!
image:url: https://museen-in-bayern.de/fileadmin/_processed_/f/f/csm__2296910_e71e99aae7.jpg
description: Bayern ist eine der reichsten deutschen Museumslandschaften. Über 1.300 Museen, Schlösser und aktuelle Ausstellungen warten auf euch!

Technology

Server: Apache

Social

Registration

Updated

2026-02-17

Name servers

nsa1.schlundtech.de.
nsb1.schlundtech.de.
nsc1.schlundtech.de.
nsd1.schlundtech.de.

DNS records live

NS

nsa1.schlundtech.de
nsb1.schlundtech.de
nsc1.schlundtech.de
nsd1.schlundtech.de

MX

10 dedi6626.your-server.de

TXT

seobility=eb10fb7918dab8f5ffb77843266c52f7

Verified for

Google
Pinterest

Email authentication strong

SPF: v=spf1 a mx include:spf.crsend.com ~all
softfail (~all)
DMARC: v=DMARC1;p=reject;sp=none;pct=50;adkim=r;aspf=r;
policy: reject (enforced) · pct=50 · sp=none
DKIM: no key found at common selectors

Certificate (current)

Encryption Everywhere DV TLS CA - G2

from 2025-11-23 to 2026-11-23

Expires in 186 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://museen-in-bayern.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://*.youtube-nocookie.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src data: 'self' https://img.youtube.com https://i.ytimg.com https://*.tile.openstreetmap.org; base-uri 'self'; frame-src 'self' https://www.youtube-nocookie.com/; connect-src 'self' https://*.tile.openstreetmap.org; style-src 'self' 'unsafe-inline' 'report-sample'; font-src 'self' data:; frame-ancestors 'self'; report-uri https://museen-in-bayern.de/@http-reporting?csp=report&requestTime=1778454038115661&requestHash=94c759541a76d103a5ecc0ef669f75b44093ba1c
strict-transport-security: max-age=31536000; includeSubDomains