cirpass2.eu

.eu crawl

First seen 2026-04-14 · Last seen 2026-05-12 · ok HTTP/1.1 200 849 ms crawled 2026-05-08

US · 162.159.134.42 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Cirpass2
Language: en-US
Generator: Elementor 4.0.6; features: e_font_icon_svg, additional_custom_breakpoints; settings: css_print_method-internal, google_font-enabled, font_display-swap
Canonical: https://cirpass2.eu/

Technology

CDN: Cloudflare
CMS: WordPress

Third-party hosts loaded (3)

cdn.elementor.com×2
cdn-cookieyes.com×1
gmpg.org×1

Social

Contact

Phone

101158775

DNS records live

NS

dns1.registrar-servers.com
dns2.registrar-servers.com

MX

10 mx1.privateemail.com
10 mx2.privateemail.com

Email authentication weak

SPF

v=spf1 include:spf.privateemail.com ~all

softfail (~all)

DMARC

not published

DKIM

default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUme3W+CZjVFfWruXfwKtRIrIAejEEAGwwuHKwNA9p+EePthhWZVhNfYzGxHLlVkA6/ZAwSyivkBU8kN…

selectors probed

Certificate (current)

WE1

from 2026-04-20 to 2026-07-19

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://cirpass2.eu/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com https://ka-f.fontawesome.com; frame-src 'self' https://www.youtube.com https://platform.twitter.com https://view.genially.com https://www.google.com https://syndication.twitter.com; worker-src 'self' blob:; base-uri 'none'; object-src 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=2592000; includeSubDomains