thw.de

.de crawl

First seen 2026-04-12 · Last seen 2026-05-17 · ok HTTP/1.1 200 1268 ms crawled 2026-05-06

DE · 80.245.145.123 · AS35704 ITZBund

Reputation 100/100

Classifying

HTML metadata

Title

THW - Startseite

Description

Homepage des deutschsprachigen Auftritts

Language

Generator

Government Site Builder

Canonical

https://www.thw.de/DE/Startseite/startseite_node.html

Feeds

Open Graph

url: https://www.thw.de/DE/Startseite/startseite_node.html
title: Startseite
locale: de
site name: THW

Technology

Server: Apache
CMS: Gatsby

Social

Contact

Email

arbeitsgruppe.ea2@thw.de

Registration

Updated

2014-06-19

Name servers

dns11.netcologne.de.
dns12.netcologne.de.
dns13.netcologne.de.
dns14.netcologne.de.

DNS records live

NS

dns11.netcologne.de
dns12.netcologne.de
dns13.netcologne.de
dns14.netcologne.de

MX

10 mx1.bund.de
10 mx2.bund.de

TXT

Show 5 TXT records

00D2X000000sFcp=1TBVi00000005fd
cisco-ci-domain-verification=5c01719bcf78410e55d15bfeb65544da2dd25da7da1fd89d12764dd0f96df76b
apple-domain-verification=oh9Hyqyg81gWlzZq
canva-site-verification=gPaVfNn_90bueVK2K8aWxg
google-site-verification=qsJXFb7bgS9m2wKv40EcRifxUfqsDJ_HNy29RDhSCfQ

Email authentication strong

SPF: v=spf1 include:_spf1.bund.de ip4:81.173.209.69/32 ip4:91.24.7.70/32 ip4:91.26.2.6/32 include:_spf.salesforce.com include:spf.init.de include:databayhosting.de ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; rua=mailto:thw.de@dmarc.reports.bund.de;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

D-TRUST BR CA 2-23-1 2023

from 2026-04-05 to 2026-10-20

Expires in 154 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.thw.de/DE/Startseite/startseite_node.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: deny
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' https://piwik.itzbund.de; style-src 'self' 'unsafe-inline'; script-src 'self' https://piwik.itzbund.de *.youtube.com; img-src 'self' data: https://social.bund.de *.cdninstagram.com *.openstreetmap.org *.youtube.com *.ytimg.com; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; frame-src *.youtube.com *.thw.de; media-src 'self' multimedia.gsb.bund.de *.cdninstagram.com www.youtube-nocookie.com www.youtube.com; upgrade-insecure-requests
strict-transport-security: max-age=31536000