indexo.dev

contacto.de

.de crawl

First seen 2026-06-01 · Last seen 2026-06-02 · ok HTTP/1.1 200 855 ms crawled 2026-06-02

DE · 148.251.125.214 · AS24940 Hetzner Online GmbH

Reputation 92/100 weak subdomain policy

Classifying

HTML metadata

Title
Contacto Bander GmbH - Professionelles Gastronomiegeschirr
Description
Contacto bietet professionelles Gastronomiegeschirr in bewährter Qualität, zumeist aus rostfreiem Edelstahl, für Ihre Küche, Gastronomie und Ihr Hotel.
Language
de-DE

Technology

Server
Microsoft-IIS
ASP.NET
4.0.30319
jQuery
1.12.4 known XSS (<3.5)
Stack
ASP.NET

Contact

Email

Registration

Updated
2010-11-09
Name servers
  • nsa9.schlundtech.de.
  • nsb9.schlundtech.de.
  • nsc9.schlundtech.de.
  • nsd9.schlundtech.de.

DNS records live

NS
  • nsa9.schlundtech.de
  • nsb9.schlundtech.de
  • nsc9.schlundtech.de
  • nsd9.schlundtech.de
MX
  • 10 mail2.contacto.de
  • 20 mail1.contacto.de

Email authentication strong

SPF
v=spf1 a mx a:go.contacto.de a:mail2.contacto.de a:mail1.contacto.de ip4:185.212.53.249 ip4:91.52.94.33 ip4:217.92.96.141 -all
strict (-all)
DMARC
v=DMARC1;p=reject;sp=none;pct=100;ruf=mailto:admin@contacto.de;ri=86400;fo=1;
policy: reject (enforced) · sp=none
DKIM
  • dkim: v=DKIM1; k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0JEFb49GBLGrdc5+2V8Vs3ovcV+T15uGbJyELGKqDOvTZRcqJm6CO7pD/aA+iZAOoSUu8XDMGu21NITipp2/…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-06-05 to 2026-07-06
Expires in 31 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://www.contacto.de/

present
  • content-security-policy
  • x-frame-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://staticxx.facebook.com https://maps.googleapis.com blob:; worker-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; base-uri 'self';

Links to (1)

Linked from (1)