octopusenergy.de

HTML metadata

Title: Nachhaltige Energie, günstig und smart | Octopus Energy
Description: Energieversorgung neu gedacht: 💚 100% Ökostrom | 💶 Transparente Preise | 🐙 Herausragender Kundenservice. Jetzt zu Octopus Energy wechseln!
Language: de
Canonical: https://octopusenergy.de

Open Graph

title: Nachhaltige Energie, günstig und smart | Octopus Energy
description: Energieversorgung neu gedacht: 💚 100% Ökostrom | 💶 Transparente Preise | 🐙 Herausragender Kundenservice. Jetzt zu Octopus Energy wechseln!

Technology

CDN: Vercel
CMS: Next.js

Third-party hosts loaded (6)

a.storyblok.com×17
cdn.jsdelivr.net×7
static.octopuscdn.com×3
assets.prd.heyflow.com×1
cdn.consentmanager.net×1
static.heyflow.app×1

Social

Contact

Email

Phone

0800 400 8010

Address

August-Everding-Straße 25, 81671, München, BY, DE

Registration

Updated

2020-11-10

Name servers

ns-1266.awsdns-30.org.
ns-1687.awsdns-18.co.uk.
ns-485.awsdns-60.com.
ns-999.awsdns-60.net.

DNS records live

NS

ns-1266.awsdns-30.org
ns-1687.awsdns-18.co.uk
ns-485.awsdns-60.com
ns-999.awsdns-60.net

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 8 TXT records

rovag_verification_token=3A9CF400D7044369B8F54C1AD8E1FADC
15ADC040CED7E10728D0C0BB626166BBDEAB7215EA89B176073E80B2495D91B1
parallels-domain-verification=ed0d9aec395340fbac51068f7d5f711443960cec65a24d12979673930820c85a
lucid-verification=4tqaklnahq42e3pry7ac
uber-domain-verification=de831adb-3daf-4d0d-b046-b8d56390ebd2
hubspot-domain-verification=MDM2MTcxYWUtMTY0Yy00OTJlLWE0M2MtMWZiNTNiNWJiYjQ2
plain-rdmbumimq1v1yycypmrnbqya035dxh
TAILSCALE-22oNDMUGXoEO83WexFqK

Verified for

1Password
Anthropic
Apple
Atlassian
Google
HackerOne
Microsoft 365
Miro
OpenAI
Slack
Stripe
Zoom

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:eu._netblocks.mimecast.com include:amazonses.com include:26182814.spf03.hubspotemail.net include:_spf.salesforce.com include:cust-spf.exacttarget.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:e11a30c9@inbox.ondmarc.com;

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBvpqpH2Sh/0RIeX02gYSNqlrVCVf7CTBuXS+q7WioohDcebGnajonFUG7aBrhR9MjT+PjKe+ubjiQ…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15yrG7LH5zf9g3lPHAn22MaQqTbrPce21YDiE3fjadPTzfF1zGDukDPPEmRx/a/AsFbwBdFeSErrlXEvfE…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2udWD4j127OkoNYM0DYoX19fSnOQndT5HKLOhJwSR/cipulkRBN6XE6tl3xFlMHBSFcr5mMimo4T6w15Il…

selectors probed

Certificate (current)

R12

from 2026-04-28 to 2026-07-27

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://octopusenergy.de/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection
missing Permissions Policy

Header values

referrer-policy: same-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; font-src 'self' data: https://vercel.live https://assets.vercel.com https://fonts.gstatic.com https://static.octopuscdn.com https://fonts.heyflow.cloud https://widget.moin.ai https://static.shopback.com; style-src 'self' 'unsafe-inline' https://vercel.live https://static.octopuscdn.com https://assets.prd.heyflow.com https://fonts.heyflow.cloud https://widget.moin.ai https://www.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://vercel.live https://static.octopuscdn.com https://assets.prd.heyflow.com https://fonts.heyflow.cloud https://widget.moin.ai https://www.gstatic.com; connect-src 'self' blob: https: wss: https://browser-intake-datadoghq.eu; img-src 'self' data: blob: https:; media-src 'self'; object-src 'none'; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self'; base-uri 'none'; form-action 'self' https://www.facebook.com; frame-ancestors 'self' https://app.storyblok.com https://octopusenergy.de; script-src 'self' 'unsafe-inline' 'uns
strict-transport-security: max-age=63072000