tng.de

.de crawl dns

First seen 2026-04-12 · Last seen 2026-05-20 · ok HTTP/1.1 200 2057 ms crawled 2026-05-20

DE · 213.178.66.101 · AS13101 TNG Stadtnetz GmbH

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title: Glasfaser, DSL, Mobilfunk und TV: Highspeed-Internet für zuhause | TNG
Description: Erleben Sie echtes Highspeed-Internet mit TNG-Glasfaser 🚀 Schnell, zuverlässig & FTTH bis ins Haus. Jetzt Verfügbarkeit prüfen & durchstarten!
Language: de-DE
Generator: Silverstripe CMS 4.13
Canonical: https://www.tng.de/privatkunden/

Open Graph

url: https://www.tng.de/privatkunden/
title: Startseite Privatkunden
locale: de_DE
site name: TNG
description: Erleben Sie echtes Highspeed-Internet mit TNG-Glasfaser 🚀 Schnell, zuverlässig & FTTH bis ins Haus. Jetzt Verfügbarkeit prüfen & durchstarten!

Technology

Server: nginx
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdn.eye-able.com×2
www.googletagmanager.com×1

Social

Contact

Phone

+4943153050400

Registration

Updated

2023-07-12

Name servers

ns1.ennit.net.
ns2.ennit.net.
ns3.tng.de.
ns4.tng.de.

DNS records live

NS

ns1.ennit.net
ns2.ennit.net
ns3.tng.de
ns4.tng.de

MX

10 mx.ennit.net
20 mx-alt1.ennit.net
20 mx-alt2.ennit.net
20 mx-alt3.ennit.net

TXT

Show 9 TXT records

D-TRUST=HZ8CTP68F5EIZFH
D-TRUST=DPXTH7ARUMTTGFLP36FAYCQ
_telesec-domain-validation=310035_2022-09-23_3VkRaDyHOtoMtJtfH6mQUaPDDlwmyfUcnTbR6yIhUhcU9CMBd4
MS=A20202F4402894DE52042B282A8E78CF4D9C4B38
D-TRUST=IS3LO7GAC6N8EP8
_telesec-domain-validation=353223_2025-10-16_8AjhgHU0BT4vQE0cIwvTBY6SRCAKMhcfcCRVoxecCjpGKZTE54
D-TRUST=37PRGC5MPIUDBS3DG8QSH56
D-TRUST=5I4WJVZAEYVWVZWLCBUJW7A
_telesec-domain-validation=339964_2024-09-12_Jp4xHLj1Uhq6QVB31sQlgHEybpdnw6jPzI1epQielbtNljwnC4

Verified for

Apple
Dynamics 365
Google
Microsoft 365

Email authentication weak

SPF

v=spf1 ip4:82.97.147.1/24 ip4:82.97.146.1/24 ip4:213.178.66.1/24 ip4:213.178.64.1/24 ip4:82.97.165.188/32 ip4:194.88.160.13 -all

strict (-all)

DMARC

not published

DKIM

mail: v=DKIM1; h=sha256; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVKdnNrYWF6ukZrDFO7IijbGQvBDjkJTZ/iIx4fDqKASsySPfdaTIvRvEwS7dFOszmJhEYm2Ij…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-10-13 to 2026-10-09

Expires in 141 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.tng.de/privatkunden/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: frame-ancestors dashboard.eye-able.com 'self'; default-src *.cookiebot.com customerchat.tng.de map.tng.de gisrenderer.lservice.software.ennit.de gisrenderer.dservice.software.ennit.de tng.local cdnjs.cloudflare.com maps.gstatic.com www.youtube.com img.youtube.com www.youtube-nocookie.com www.google.com www.gstatic.com www.googletagmanager.com www.google-analytics.com googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net www.google.de stats.g.doubleclick.net *.bing.com *.bing.net connect.facebook.net region1.analytics.google.com region1.google-analytics.com *.clarity.ms pagead2.googlesyndication.com www.facebook.com *.tng.de fonts.cdnfonts.com ccc.my-phone.cloud www.tng.de t.tellja.eu maps.googleapis.com fonts.googleapis.com *.heyflow.com *.mkt.dynamics.com *.azureedge.net *.eye-able.com www.dwin1.com lantern.roeyecdn.com lantern.roeye.com scripts.clarity.ms dcclick.dcscloud.de/tng/find_ssid.html 'self' 'unsafe-inline' data:; font-src fonts.gstatic.c