indexo.dev

exportarts.io

.io crawl

First seen 2026-04-12 · Last seen 2026-05-05 · ok HTTP/1.1 200 1328 ms crawled 2026-05-05

DE · 78.46.3.11 · AS24940 Hetzner Online GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Online Marketing Agentur in Kassel | Exportarts
Description
Deine pinke Online Marketing Agentur in Kassel. Webdesign & Onlineshops, die konvertieren ✓ SEO & Social Media ✓ Jetzt Termin bei Exportarts vereinbaren.
Language
de
Canonical
https://www.exportarts.io

Technology

Server
Apache
Cookie consent
  • Usercentrics

Third-party hosts loaded (3)

  • exportarts.cdn.prismic.io×17
  • images.prismic.io×11
  • web.cmp.usercentrics.eu×1

Social

Contact

Phone
Address
Königstor 15, 34117, Kassel, Hessen, DE

DNS records live

NS
  • root-dns.netcup.net
  • second-dns.netcup.net
  • third-dns.netcup.net
MX
  • 1 smtp.google.com
TXT
Show 7 TXT records
  • tiktok-developers-site-verification=NfBrDvaDf8hQrYiBWvhjWFyOevEl1Ssu
  • MS=ms82351273
  • google-site-verification=51uwMgwCOKJ2No2UaEYj3EWU4ll8rGsQxAPKMJ3a4aQ
  • stripe-verification=f3a87322e99c5b26d81ad116649a6564ba29b3a17b1a355986871fa33fd36e6f
  • v=spf1 include:_spf.google.com ~all
  • atlassian-domain-verification=du1tyndNOZPK/jNFg2KqzFxBX6XMkzZ5TTczxXfjT5h0x7jKiCtSCyj/l4vBTXB2
  • brevo-code:fc76016a99a737b8a59e0393ec1044aa

Certificate (current)

R12
from 2026-02-20 to 2026-05-21
Expires in 2 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.exportarts.io/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'none'; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://static.cdn.prismic.io https://prismic.io https://api.signalize.com https://web.cmp.usercentrics.eu https://static.hotjar.com https://script.hotjar.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://static.cdn.prismic.io https://web.cmp.usercentrics.eu https://static.hotjar.com https://script.hotjar.com; connect-sr

Links to (5)

Linked from (2)