indexo.dev

braincon.de

.de crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 541 ms crawled 2026-05-14

DE · 81.169.145.175 · AS6724 Strato GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
braincon GmbH
Language
de
Generator
WordPress 6.9
Canonical
https://braincon.de/

Technology

Server
Apache
CMS
WordPress

Social

Contact

Phone

Registration

Updated
2010-12-29
Name servers
  • docks17.rzone.de.
  • shades15.rzone.de.

DNS records live

NS
  • docks17.rzone.de
  • shades15.rzone.de
MX
  • 10 braincon-de.mail.protection.outlook.com
TXT
Show 5 TXT records
  • teamviewer-sso-verification=74cec1e43ec6481aaff6d8c019378754
  • MS=ms45694546
  • atlassian-domain-verification=5busNs9mRyGzobewmYkdr79FiAfEmCpshYGdLSGNGausRBBZzRNId8rp2Ya1I9I0
  • apple-domain-verification=k8SlRhU1BhDhq4u6
  • google-site-verification=10n5mtJIdYolCLv0mGzSEeEDaxi_7_PHlz22VVpwCaI

Email authentication partial

SPF
v=spf1 ip4:195.62.45.220 include:spf.protection.outlook.com include:spf.eu.exclaimer.net include:_spf.strato.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc@braincon.de; ruf=mailto:dmarc@braincon.de
policy: none (monitoring only)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzgweGwQRJcHa6II8Id06h/O9B2XqGKW7uOGaxOAPVzOarZpSaryOQaJoJv7R9T6WAV43ShZEfdDghQORDVk…
  • selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXtGuzVl+3ERfUdMUZlLazKfoVubW3bwFJKH1aN4orAP0RDWNHHG88BfPxwohT+QBf4hr21POz/PrBTMPVJF…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2026-01-03 to 2027-01-25
Expires in 250 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://braincon.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), microphone=(), geolocation=()
x-content-type-options
nosniff
content-security-policy
default-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob:; font-src *; connect-src *; frame-ancestors 'self';
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (5)

Linked from (1)