indexo.dev

butlermachts.de

.de crawl

First seen 2026-05-02 · Last seen 2026-05-08 · ok HTTP/1.1 200 581 ms crawled 2026-05-08

DE · 91.239.93.172 · AS196954 Epcan GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Butler macht's!
Description
Große Auswahl an Straßenbaustoffen, Dachzubehör, Werkzeugen und Maschinen, Malerzubehör, Befestigungstechnik und Bauchemie, in Profiqualität zu fairen Preis von Butler macht's!
Language
de

Technology

Server
Apache
CMS
Gatsby

Third-party hosts loaded (1)

  • cdn.mystrait.de×2

Registration

Updated
2025-01-06
Name servers
  • ns1-a.nadns1.fr.
  • ns1-b.nadns1.com.
  • ns1-c.nadns1.com.

DNS records live

NS
  • ns1-a.nadns1.fr
  • ns1-b.nadns1.com
  • ns1-c.nadns1.com
TXT
  • google-site-verification=QeO9km5qlZzL-hku3fj9cBGJz2d-VDsvcJm7YbM0Hdo

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Sectigo RSA Domain Validation Secure Server CA
from 2025-05-19 to 2026-06-20
Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://butlermachts.de/

present
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • missing Content Security Policy
  • weak frame protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN, SAMEORIGIN
x-content-type-options
nosniff
content-security-policy-report-only
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com https://fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce

Linked from (2)