zum.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 4062 ms crawled 2026-05-18

DE · 46.4.65.203 · AS24940 Hetzner Online GmbH

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

Zentrale für Unterrichtsmedien im Internet e.V.

Language

Generator

WordPress 6.9.4

Canonical

https://www.zum.de/portal/

Feeds

Technology

Server: nginx
CMS: WordPress

Third-party hosts loaded (2)

lehreronline.adspirit.de×4
gmpg.org×1

Social

Registration

Updated

2014-05-06

Name servers

ns1.first-ns.de.
robotns2.second-ns.de.
robotns3.second-ns.com.

DNS records live

NS

ns1.first-ns.de
robotns2.second-ns.de
robotns3.second-ns.com

MX

10 zumserver.zum.de
5 mail.zum.de

TXT

_acme-challenge.zum.de=tvGkjf0_KK1Jku6woc6eYyH7UluTc9gg5HKU3JFcUiY

Email authentication partial

SPF

v=spf1 mx a ip4:46.4.65.203/32 mx:metis.zum.de mx:zumserver.zum.de ip4:88.99.253.153/32 ip4:116.202.233.184/32 ip4:168.119.145.97/32 ip6:2a01:4f8:251:85d::2 ip4:176.9.48.202 ip6:2a01:4f8:150:64c5::2 mx:mail.zum.de -all

strict (-all)

DMARC

v=DMARC1;p=none

policy: none (monitoring only)

DKIM

mail: v=DKIM1; k=rsa; t=y; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXWBwzBWCCZMWRfX9q6ioPJ9+xc7Q4P7Wmdd18hI5swTCQQrsR+sduTv1L6RKDL4986lPYtHUNxyRls…
dkim: v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kiVXB2LPYS2ngtaRFPkRILeuvrVK8FwCBLBIRZxdEN0tHOAjmwij1bfKFyGv7ZUXdCW…

selectors probed

Certificate (current)

R13

from 2026-04-15 to 2026-07-14

Expires in 56 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.zum.de/portal

present

permissions-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy

Header values

permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")