indexo.dev

borniak.de

.de crawl

First seen 2026-04-19 · Last seen 2026-05-13 · ok HTTP/1.1 200 5655 ms crawled 2026-05-13

FR · 51.75.55.29 · AS16276 OVH SAS

Reputation 100/100

sector food type homepage

HTML metadata

Title
Hersteller von elektrischen Räucheröfen und Zubehör für das Räuchern Heiss- und Kalträuchern Trockenen Dörren BBQ - Borniak - Borniak
Description
Borniak Räucheröfen und Zubehör – einfach für den Hausgebrauch Fleisch, Fisch und Käse räuchern. Setzen Sie auf zuverlässige Premium Qualität.
Language
de

Technology

Server
nginx
CMS
Gatsby
Analytics
  • Google Tag Manager
Social widgets
  • YouTube Embed

Third-party hosts loaded (5)

  • media.borniak.com×7
  • borniak.pl×2
  • widgets.trustedshops.com×1
  • www.googletagmanager.com×1
  • www.youtube.com×1

Social

Contact

Email
Phone
Address
Al. Niepodleglosci 41, 78-449, Borne Sulinowo, PL

Registration

Updated
2025-07-19
Name servers
  • dns106.ovh.net.
  • ns106.ovh.net.

DNS records live

NS
  • dns106.ovh.net
  • ns106.ovh.net
MX
  • 1 mail.borniak.pl
TXT
  • google-site-verification=N00zsnTLKgQF6CKNRnvAeYdCtwpFpCGbz9PHQwNsKPw
  • brevo-code:5c879c5beca4ae2c651b5997fad5b5e2
  • 1|www.borniak.de

Email authentication strong

SPF
v=spf1 a mx a:mail.borniak.pl ip4:51.83.214.244 ip6:2001:41d0:602:251d:0:0:0:0 include:borniak.pl -all
strict (-all)
DMARC
v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:abuse@borniak.com ruf=mailto:abuse@borniak.com; fo=1
policy: reject (enforced)
DKIM
  • default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDM+rYUrojQ87Tlcf72lo5Z/yA5O2C0Rfj/UJjFNsy/ds2uijAMF8zWFFiXLIqOP4+3AL0ol4Q+xpgKjNO40L20R4VPs…
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

R12
from 2026-03-25 to 2026-06-23
Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://borniak.de/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN, SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com static.payu.com *.cloudflare.com *.cloudflare.net *.cloudfront.net *.fontawesome.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.borniak.pl borniak.pl fabrity.borniak.pl *.addsauce.com *.revolut.com *.paypal.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.revolut.com secure.payu.com secure.snd.payu.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtu

Links to (8)

Linked from (2)