stadtentwaesserung-braunschweig.de
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
Third-party hosts loaded (1)
- cdn.eye-able.com×2
Registration
- Updated
- 2025-07-16
- Name servers
-
- ns-1105.awsdns-10.org.
- ns-1588.awsdns-06.co.uk.
- ns-486.awsdns-60.com.
- ns-552.awsdns-05.net.
DNS records live
- NS
-
- ns-1105.awsdns-10.org
- ns-1588.awsdns-06.co.uk
- ns-486.awsdns-60.com
- ns-552.awsdns-05.net
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- TXT
-
2tq4e6ode85lb8ms0e3efb74cok4b1o0gv7n44kdt38bkt4bheom
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 include:spf-a.stadtentwaesserung-braunschweig.de ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
Starfield Secure Certificate Authority - G2
Expires in 198 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- permissions-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
Header values
- permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")- content-security-policy
default-src 'self' *.bs-energy.de *.bs-netz.de *.se-bs.de *.stadtentwaesserung-braunschweig.de *.kom-dia.de *.energiebuendel-online.de api.friendlycaptcha.com bsenergy.matomo.cloud endpoint-app.cognigy.ai wss: maps.googleapis.com translate.eye-able.com api.digiaccess.org *.selfservices.bs-energy.de;script-src 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' *.bs-energy.de *.bs-netz.de *.se-bs.de *.stadtentwaesserung-braunschweig.de *.kom-dia.de *.energiebuendel-online.de unpkg.com bsenergy.matomo.cloud cdn.matomo.cloud *.eye-able.com maps.google.com maps.googleapis.com download.digiaccess.org ptxj4g5qtm.eu-central-1.awsapprunner.com xihv4ecj4h.eu-central-1.awsapprunner.com advisor.senercon.de embed.journey.epilot.io;script-src-attr 'self' 'unsafe-hashes' 'unsafe-eval' 'unsafe-inline' *.bs-energy.de *.bs-netz.de *.se-bs.de *.stadtentwaesserung-braunschweig.de *.kom-dia.de *.energiebuendel-online.de;style-src 'self' 'unsafe-inline' 'unsafe-hashes' *.bs-energy.de *.bs-netz.de *.se-bs.- strict-transport-security
max-age=2628000; includeSubDomains; preload, max-age=63072000; includeSubDomains; preload