desoi.de

.de crawl

First seen 2026-04-28 · Last seen 2026-05-18 · ok HTTP/1.1 200 2483 ms crawled 2026-05-06

DE · 62.138.208.111 · AS61157 PlusServer GmbH

Reputation 100/100

sector other type homepage

HTML metadata

Title: DESOI GmbH | www.desoi.de
Language: de
Canonical: https://www.desoi.de/catalog/de/

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

+49665596360

Registration

Updated

2025-08-29

Name servers

dns10.nethinks.com.
dns9.nethinks.com.

DNS records live

NS

dns10.nethinks.com
dns9.nethinks.com

MX

10 mx2.fuldacloud.de
5 mx1.fuldacloud.de

TXT

Show 5 TXT records

v=spf1 a mx a:fortimail.fuldacloud.de a:securemail.fuldacloud.de include:spf.dc-cluster.de include:spf-de.emailsignatures365.com include:spf.protection.outlook.com -all
swisssign-check=PFSBY8DvWRt082-KBIopBAwd3-Q
MS=ms43415777
MS=DF74FEF123347F3DCDF3F069E8980D1196DCF919
swisssign-check=M7KGTcACXCR1-WOieYkv2kW4z7A

Certificate (current)

from 2026-04-07 to 2026-07-06

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.desoi.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'self' payments-de-sandbox.amazon.com payments-de.amazon.com payments.amazon.de https://news.desoi.de www.google-analytics.com stats.g.doubleclick.net https://*.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' use.typekit.net www.googletagmanager.com www.google.com www.google-analytics.com www.gstatic.com maps.google.com maps.googleapis.com connect.facebook.net *.payments-amazon.com payments-de-sandbox.amazon.com tagmanager.google.com *.trustedshops.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' use.typekit.net fonts.googleapis.com tagmanager.google.com *.trustedshops.com cdn.jsdelivr.net; img-src 'self' data: p.typekit.net www.google-analytics.com *.googleapis.com maps.google.com *.cloudfront.net *.ssl-images-amazon.com *.ggpht.com *.gstatic.com img.youtube.com www.desoi.de; font-src 'self' data: use.typekit.net fonts.gstatic.com *.trustedshops.com; object-src 'self' https://maps.google.com; media-src 'self'; child-src 'self' payments-de
strict-transport-security: max-age=31536000; includeSubDomains; preload