indexo.dev

althoefer.de

.de crawl

First seen 2026-05-06 · Last seen 2026-05-13 · ok HTTP/1.1 200 4285 ms crawled 2026-05-13

DE · 168.119.158.206 · AS24940 Hetzner Online GmbH

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
www.althoefer.de
Language
de_DE
Canonical
https://www.althoefer.de/

Open Graph

url
https://www.althoefer.de/
title
www.althoefer.de
site name
www.althoefer.de

Technology

Server
Apache
CMS
Gatsby

Registration

Updated
2010-04-29
Name servers
  • ns3.oberberg-online.de.
  • ns.oberberg-online.de.

DNS records live

NS
  • ns.oberberg-online.de
  • ns2.oberberg-online.de
  • ns3.oberberg-online.de
MX
  • 10 fm01.oberberg.net

Email authentication weak

SPF
v=spf1 include:_spf.oberberg.net -all
strict (-all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-03-23 to 2026-06-21
Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.althoefer.de/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; base-uri 'self'; connect-src 'self' https://maps.googleapis.com/ https://*.googletagmanager.com/ https://*.google-analytics.com/ https://*.analytics.google.com/ https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://*.clarity.ms/collect https://bat.bing.net/; font-src 'self' data: https://fonts.gstatic.com/; form-action 'self'; img-src 'self' data: https://maps.googleapis.com/maps/ https://maps.gstatic.com/ https://www.googletagmanager.com/ https://ssl.gstatic.com/ https://www.gstatic.com/ https://*.google-analytics.com/ https://*.googletagmanager.com/ https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.cdninstagram.com/ https://bat.bing.net/; media-src 'self' https://*.cdninstagram.com/; script-src 'self' 'nonce-vDIGPSWIvX32j59BKbA7xwIYyhxCcCAKYSFNrM9I' https://www.obis-concept.de/ https://www.google.com/recaptcha/ https://recaptcha.google.com/re

Links to (5)

Linked from (1)