indexo.dev

spd-barntrup.de

.de crawl

First seen 2026-04-26 · Last seen 2026-05-19 · ok HTTP/1.1 200 1000 ms crawled 2026-05-19

US · 3.164.206.20 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

sector government type homepage

HTML metadata

Title
SPD
Description
AUF DIE PLÄTZE! FERTIG! LOS!. Die Sonne lassen wir untergehen. Barntrup nicht.. Und wieder ist ein Schuljahr vorbei.... SPD sorgt für ...
Language
de-DE
Generator
soz.is
Canonical
https://www.spd-barntrup.de/

Technology

CDN
Amazon CloudFront
CMS
WordPress

Social

Registration

Updated
2026-02-17
Name servers
  • ns-1422.awsdns-49.org.
  • ns-2003.awsdns-58.co.uk.
  • ns-56.awsdns-07.com.
  • ns-570.awsdns-07.net.

DNS records live

NS
  • ns-1422.awsdns-49.org
  • ns-2003.awsdns-58.co.uk
  • ns-56.awsdns-07.com
  • ns-570.awsdns-07.net
MX
  • 10 mail.barracuda.de

Email authentication weak

SPF
v=spf1 include:spf.barracuda.de -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04
from 2025-09-25 to 2026-10-24
Expires in 156 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.spd-barntrup.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
same-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self'; default-src 'self' https://civolve.ai data: blob:; base-uri 'self'; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * data:; font-src 'self' *.gstatic.com *.embedly.com static.spd.de https://civolve.ai data:;connect-src 'self' https://civolve.ai *.reddit.com *.akamaihd.net *.spoe.at rose.spoe.at *.google-analytics.com google-analytics.com www.facebook.com altruja.de *.altruja.de dataservices.spd.de; media-src * blob: data: 'self'; object-src 'self'; frame-src * ; manifest-src 'self'; worker-src 'self' blob: data: ; form-action *; upgrade-insecure-requests; block-all-mixed-content;
strict-transport-security
max-age=31536000;

Links to (1)

Linked from (1)