stawag.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-17 · ok HTTP/1.1 200 1559 ms crawled 2026-05-07

DE · 83.138.60.100 · AS8422 NetCologne Gesellschaft fur Telekommunikation mbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: STAWAG – Stadt- und Städteregionswerke Aachen AG | STAWAG – Stadt- und Städteregionswerke Aachen AG
Description: STAWAG – Stadt- und Städteregionswerke Aachen AG: Zuverlässiger und kundenfreundlicher Dienstleister rund um Strom, Gas, Wärme, Wasser und Abwasser in Aachen.
Language: de-DE
Generator: TYPO3 CMS
Canonical: https://www.stawag.de/

Technology

Server: nginx
CMS: Joomla

Analytics

Google Tag Manager

Third-party hosts loaded (4)

cdn.eye-able.com×2
unpkg.com×1
widget.moin.ai×1
www.googletagmanager.com×1

Social

Registration

Updated

2026-04-23

Name servers

ns01.ondns.de.
ns02.ondns.eu.

DNS records live

NS

ns01.ondns.de
ns02.ondns.eu

MX

10 mail10.regioit-aachen.de
10 mail11.regioit-aachen.de
10 mail12.regioit-aachen.de

TXT

/gdoJz3mjeFL0t+DUK5oaROr7QtqruvYIzXr9s3MGn+HCU1+FdR4Loz16xesbvyJ6EtAvbQjmRZZNlvRBLJtcw==
u6zzpxA35od1kwt4mVfXPTVaHRYhiN3hPy/gRNugs0d2nVE2KKu+3XKPPaAMRMIUksi5kpGcqzsNV7i4YSf5Ag==
google-site-verification=UrYSm-7pqo6FAy_qeF4N0WzvJiUK5urk5ryFZ6HAoU0

Email authentication partial

SPF

v=spf1 mx ip4:85.214.195.252 ip4:85.214.21.134 ip4:85.214.42.60 ip4:193.70.16.21 ip4:178.77.113.220 ip6:2a01:488:42:1000:b24d:71dc:ff99:be24 include:spf.crsend.com include:amazonses.com ip4:168.245.70.7 include:spf.protection.outlook.com include:spf.regioit.de  include:_spf.on.services -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQuy+pRnnPNeqX/G8hk8vvoIkxlU5mOKnKW7mxlgKtcgYQbyBRdCiIM2TRTuGC4zavU+hDNRDx0/aDrv+N…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EgzXLMD2cx6FS1tyfDxH1Xi15QIlREHQ47MPvyZNh9uj/+sHy/P8KzGgoXwUWzz51vJlS5nmw6GeyhtYl…

selectors probed

Certificate (current)

R12

from 2026-04-20 to 2026-07-19

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.stawag.de/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.eye-able.com https://unpkg.com https://www.googletagmanager.com https://elements.green-connector.com https://cdn.mercury.ai https://gc-migration-de.s3.eu-central-1.amazonaws.com https://app.usercentrics.eu https://maps.googleapis.com https://cdn.rawgit.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.eye-able.com https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maps.googleapis.com https://cdn.rawgit.com https://cdn.jsdelivr.net/ https://cdn.mercury.ai; img-src 'self' data: https://cdn.eye-able.com https://maps.gstatic.com https://app.usercentrics.eu https://uct.service.usercentrics.eu https://www.googletagmanager.com https://maps.googleapis.com; font-src 'self' https://cdn.eye-able.com https://fast.fonts.net https://cdn.mercury.ai https://fonts.gstatic.com data:; connect-src 'self' https://cdn.eye-able.com https://api.use