eurorastpark.de

.de crawl

First seen 2026-04-16 · Last seen 2026-05-14 · ok HTTP/1.1 200 3218 ms crawled 2026-05-11

DE · 193.26.158.231 · AS197540 netcup GmbH

Reputation 100/100

Classifying

HTML metadata

Title: Home
Language: de-DE
Generator: TYPO3 CMS
Canonical: https://www.eurorastpark.de/

Technology

Server: Apache

Social

Registration

Updated

2022-08-18

Name servers

ns01.dvintern.de.
ns02.dvintern.de.

DNS records live

NS

ns01.dvintern.de
ns02.dvintern.de

MX

0 eurorastpark-de.mail.protection.outlook.com

TXT

have-i-been-pwned-verification=c5dbde77d716656fc7e7794d71638688

Verified for

Apple
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf-de.emailsignatures365.com include:_spf_eucentral1.prod.hydra.sophos.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; fo=0:d:s; rua=mailto:a.1jbewdwp@reports.sophosdmarc.net,mailto:administrator@dvimmobilien.de; ruf=mailto:administrator@dvimmobilien.de

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA030ZjNHNxpSiSeM7GNRl3TChir29wkRaqjZw022Iqg/dXYxw7VxxronjJE81la/7s+M9TGcYTyZLRZ…
mail: v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7s6zswiMos2I/ywnOBgq9VR4wrP4aYb795Qrv5bmKm8XWCZKAdG/ewaymkk0XoMmYmKYkIjC6tLi4VW…

selectors probed

Certificate (current)

R12

from 2026-04-29 to 2026-07-28

Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.eurorastpark.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin
permissions-policy: accelerometer=(), autoplay=(), camera=(), document-domain=(), encrypted-media=(), fullscreen=*, geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=*, publickey-credentials-get=(), sync-xhr=(), usb=(), screen-wake-lock=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.clarity.ms *.bugherd.com *.doubleclick.net *.youtube.com *.facebook.net *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.cloudfront.net; frame-src 'self' blob: *.bugherd.com *.google.com *.youtube.com *.youtube-nocookie.com; img-src 'self' data: *.my-lead-funnel.de *.facebook.com *.fbcdn.net *.google.com *.google.de *.amazonaws.com *.cloudfront.net img.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.cloudfront.net *.google-analytics.com *.googletagmanager.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.cloudfront.net fonts.gstatic.com *.bugherd.com ; worker-src *.google-analytics.com *.googletagmanager.com *.youtube.com *.youtube-nocookie.com; object-src 'none'; connect-src 'self' *.clarity.ms *.bugsnag.com wss://ws.pusherapp.com *.pusherapp.co
strict-transport-security: max-age=63072000; includeSubDomains; preload, max-age=63072000