spd-rlp.de

.de crawl

First seen 2026-04-29 · Last seen 2026-05-19 · ok HTTP/1.1 200 236 ms crawled 2026-05-07

DE · 87.118.86.53 · AS31103 Keyweb AG

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Die Website der Sozialdemokratie in Rheinland-Pfalz › SPD Rheinland-Pfalz
Description: Alexander Schweitzer, Sabine Bätzing-Lichtenthäler und das Team der SPD RLP verbinden Tradition und Erfahrung mit dem klaren Fokus auf Zukunft.
Language: de-DE
Generator: soz.is
Canonical: https://www.spd-rlp.de/

Technology

CDN: Amazon CloudFront
CMS: WordPress

Social

Registration

Updated

2023-02-23

Name servers

ns2.janeway.unaone.net.
ns.janeway.unaone.net.

DNS records live

NS

ns.janeway.unaone.net
ns2.janeway.unaone.net

MX

10 janeway.unaone.net

Email authentication partial

SPF

v=spf1 a mx -all

strict (-all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRPBzO+yz5GxrTikE8n0nfEpmeVUtGvax9lPZ/rNnF7yV/sz9eymjXYFp5KxIJsi2LGwfXxfY1bMGU…

selectors probed

Certificate (current)

R13

from 2026-03-16 to 2026-06-14

Expires in 25 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.spd-rlp.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; default-src 'self' https://civolve.ai data: blob:; base-uri 'self'; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * data:; font-src 'self' *.gstatic.com *.embedly.com static.spd.de https://civolve.ai data:;connect-src 'self' https://civolve.ai *.reddit.com *.akamaihd.net *.spoe.at rose.spoe.at *.google-analytics.com google-analytics.com www.facebook.com altruja.de *.altruja.de dataservices.spd.de; media-src * blob: data: 'self'; object-src 'self'; frame-src * ; manifest-src 'self'; worker-src 'self' blob: data: ; form-action *; upgrade-insecure-requests; block-all-mixed-content;
strict-transport-security: max-age=31536000;