stwgd.de

.de crawl

First seen 2026-04-18 · Last seen 2026-05-16 · ok HTTP/1.1 200 6277 ms crawled 2026-05-12

DE · 46.229.46.199 · AS61157 PlusServer GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Startseite - Stadtwerke Schwäbisch Gmünd
Description: Die Stadtwerke Schwäbisch Gmünd versorgen Sie mit Strom, Erdgas, Wasser und Wärme und informieren über bewussten Umgang mit Energie.
Language: de
Generator: Contao Open Source CMS

Technology

Server: nginx

Third-party hosts loaded (1)

cdn.consentmanager.net×1

Social

Contact

Email

Phone

Registration

Updated

2020-01-10

Name servers

ns1.ropadns.de.
ns2.ropadns.de.

DNS records live

NS

ns1.ropadns.de
ns2.ropadns.de

MX

10 mx01.hornetsecurity.com
20 mx02.hornetsecurity.com
30 mx23c.antispameurope.com
40 mx23d.antispameurope.com

TXT

QuoVadis=530d1fb7-79f8-42ce-a880-180f46c3ef2f
Dz0JZ73LIT2NkX6JSwSf5Zeg8yJMXzwpZCK7Q3snU3vk/LTzhQij8loECDztApabxHsTHdH5n6pGAqs/GBj1kQ==

Verified for

Microsoft 365

Email authentication weak

SPF: v=spf1 include:spf.hornetsecurity.com include:spf.topdesk.net include:spf.antispameurope.com include:spf.mail.edi-eww.de include:spf.mail02.edi-eww.de ip4:46.229.46.199 ip4:109.237.138.49 ip4:109.237.142.240 ip4:213.144.8.33 ip4:88.79.192.217 ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-21 to 2026-07-20

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.stwgd.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=(), accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=*, bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=*, gamepad=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=*, window-management=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:
strict-transport-security: max-age=17280000