avitea.de

.de crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 3839 ms crawled 2026-05-14

DE · 209.206.38.51 · AS20570 Telekom Deutschland GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: avitea - echt.gut.arbeiten. Finden auch Sie genau Ihren Job!
Description: Ob Bewerber oder interessiertes Unternehmen - avitea ist Ihr Partner in Sachen Arbeitnehmerüberlassung, Personaldienstleistungen & Zeitarbeit.
Language: de
Canonical: https://www.avitea.de/de

Open Graph

url: https://www.avitea.dehttps://www.avitea.de/de
title: avitea - echt.gut.arbeiten. Finden auch Sie genau Ihren Job!
description: Ob Bewerber oder interessiertes Unternehmen - avitea ist Ihr Partner in Sachen Arbeitnehmerüberlassung, Personaldienstleistungen & Zeitarbeit.

Technology

Server: nginx

Third-party hosts loaded (2)

userlike-cdn-widgets.s3-eu-west-1.amazonaws.com×1
www.hella.com×1

Social

Contact

Email

Phone

Registration

Updated

2025-12-10

Name servers

pns.dtag.de.
secondary006.dtag.net.

DNS records live

NS

pns.dtag.de
secondary006.dtag.net

MX

5 mx1.hc106-56.eu.iphmx.com
5 mx2.hc106-56.eu.iphmx.com

TXT

knowbe4-site-verification=fe8b1fbbbe674cb2b44b2a173357a9a3

Verified for

Microsoft 365

Email authentication weak

SPF: v=spf1 exists:%{i}.spf.hc106-56.eu.iphmx.com ip4:209.206.38.65 ip4:209.206.38.66 ip4:209.206.38.67 ip4:209.206.38.68 a:mail.mona-ai.services include:spf.cluster.4hr.de include:_spf.sequrix.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Corporation Service Company RSA OV SSL CA

from 2025-05-08 to 2026-05-26

Expires in 5 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.avitea.de/de

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://legalhelper.eu * https://liveupdate.pimcore.org/update-check https://www.mtcaptcha.com https://tr.joblift.de; img-src 'self' https://legalhelper.eu/ccm19/public * data:; script-src 'self' 'unsafe-inline' bundles/pimcoreadmin/js/lib/ckeditor/ckeditor.js * https://hella.containers.piwik.pro * 'unsafe-eval' bundles/pimcoreadmin/extjs/js/ext-all.js https://service.mtcaptcha.com/mtcv1/client/mtcaptcha.min.js https://legalhelper.eu/ccm19/public/app.js https://assets.joblift.com/tr/de.js https://code.jquery.com/jquery-3.6.0.min.js bundles/pimcoreadmin/extjs/js/ext-all.js bundles/pimcoreadmin/js/pimcore/startup.js; style-src 'self' 'unsafe-inline' https://legalhelper.eu/ccm19/public/app.css; report-uri /nelmio/csp/report
strict-transport-security: max-age=31536000; includeSubDomains