aquarius-borken.de

.de crawl

First seen 2026-05-05 · Last seen 2026-05-18 · ok HTTP/1.1 200 6753 ms crawled 2026-05-12

DE · 92.205.173.217 · AS21499 Host Europe GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Aquarius Borken: Erlebnisbad, Saunawelt & Wellness
Description: Entdecken Sie das Aquarius Borken – Ihr Zentrum für Schwimmspaß, eine vielfältige Saunalandschaft und kulinarische Genüsse. Mehr erfahren!
Language: de
Generator: TYPO3 CMS
Canonical: https://www.aquarius-borken.de/

Technology

Server: Apache
CMS: Gatsby

Social widgets

YouTube Embed

Third-party hosts loaded (1)

www.youtube-nocookie.com×1

Social

Contact

Email

935-0info@aquarius-borken.de

Phone

+4928619350

Registration

Updated

2018-08-10

Name servers

ns1078.ui-dns.biz.
ns1078.ui-dns.com.
ns1078.ui-dns.de.
ns1078.ui-dns.org.

DNS records live

NS

ns1078.ui-dns.biz
ns1078.ui-dns.com
ns1078.ui-dns.de
ns1078.ui-dns.org

MX

10 mail1.stadtwerke-coesfeld.de
20 mail.stadtwerke-coesfeld.de

TXT

k2hhdi4fkokr1kvl13libeijnb
l0upcjd4g3jkj4a1u4tscdlg0h
v=verifydomain MS=2316344

Email authentication weak

SPF: v=spf1 include:secureserver.net -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2025-11-04 to 2026-11-29

Expires in 192 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.aquarius-borken.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src *; script-src * 'unsafe-eval' 'unsafe-inline' blob:; style-src 'self' 'unsafe-inline' *.googletagmanager.com *.googleapis.com; img-src 'self' *.linkedin.com *.google.de *.google.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com data:; font-src 'self' *.gstatic.com data:
strict-transport-security: max-age=63072000; includeSubDomains; preload