indexo.dev

waz.de

.de toplist crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 792 ms crawled 2026-05-18

DE · 3.72.121.83 · AS16509 Amazon.com, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
WAZ | Westdeutsche Allgemeine Zeitung
Description
Aktuelle Nachrichten, Sport und Kultur aus dem Ruhrgebiet
Language
de
Canonical
https://www.waz.de/
Feeds

Open Graph

url
https://www.waz.de/
title
WAZ | Westdeutsche Allgemeine Zeitung
locale
de_DE
description
Aktuelle Nachrichten, Sport und Kultur aus dem Ruhrgebiet

Technology

CDN
Amazon CloudFront
CMS
Gatsby
Ads
  • Google Ads (DoubleClick)
Third-party hosts loaded (10)
  • img.sparknews.funkemedien.de×145
  • cdn.piano.io×2
  • spark.cloud.funkedigital.de×2
  • b.delivery.consentmanager.net×1
  • buy.tinypass.com×1
  • c2.piano.io×1
  • cdn.julephosting.de×1
  • securepubads.g.doubleclick.net×1
  • static.cleverpush.com×1
  • waz.met.vgwort.de×1

Social

Registration

Updated
2026-02-03
Name servers
  • b.ns14.net.
  • c.ns14.net.
  • d.ns14.net.

DNS records live

NS
  • b.ns14.net
  • c.ns14.net
  • d.ns14.net
MX
  • 100 waz-de.mail.protection.outlook.com
TXT
Show 8 TXT records
  • adobe-idp-site-verification=a46d6bc5-de21-4e1f-aee1-344c0a0923c6
  • ahrefs-site-verification_85c9ada5714024784dd4ce2446bee1ccccc1206ed26c745b0f7b725e86bc57f2
  • google-site-verification=8AMgmTV7OdMOGFNyLOMCn6dZmJ3axzakB4M8otjL-v0
  • swisssign-check=i055O9QnopM3aje6MVPnJtFbye8
  • google-site-verification=trVk5c56XG3wfJuA5QHtqGgCkZuKLXZUTJ8-aUWRS1I
  • facebook-domain-verification=9mp053j1xrf46bxmqsh3r776x4fn08
  • MS=ms45075099
  • google-site-verification=vl7c-nqXtrqlSfVk8eQHN0VH1ityGbnXBfXlu3SPQcA

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:spf.funkemedien.de -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; sp=quarantine; pct=100; rua=mailto:dmarc_report@funkemedien.de
policy: quarantine · sp=quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdjMG/VWyu8lSAbqt/gC3VNysNsgp6vgEz2PErXt6OvDYLet831Hbkq0WFhMlX1CZdSwr6URy+ZBqo…
selectors probed

Certificate (current)

Amazon RSA 2048 M04
from 2026-05-03 to 2026-11-17
Expires in 181 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.waz.de/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
frame-ancestors 'self' *.funke.cue.cloud app.storyblok.com

Links to (23)

Linked from (45)