indexo.dev

exxcellent.de

.de crawl

First seen 2026-04-15 · Last seen 2026-05-10 · ok HTTP/1.1 200 3977 ms crawled 2026-05-10

DE · 217.6.238.196 · AS3320 Deutsche Telekom AG

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Individuelle Softwareentwicklung & Consulting - eXXcellent solutions
Description
Individuelle Softwareentwicklung & Consulting mit Standorten in Ulm und Darmstadt. User centered & maßgeschneidert.
Language
en-US
Generator
WordPress 6.9.4
Canonical
https://www.exxcellent.de
Feeds

Open Graph

url
https://www.exxcellent.de
title
Individuelle Softwareentwicklung & Consulting - eXXcellent solutions
locale
en_US
site name
eXXcellent solutions
description
Individuelle Softwareentwicklung & Consulting mit Standorten in Ulm und Darmstadt. User centered & maßgeschneidert.

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager
Cookie consent
  • Usercentrics

Third-party hosts loaded (5)

  • js-eu1.hs-scripts.com×2
  • app.usercentrics.eu×1
  • gmpg.org×1
  • privacy-proxy.usercentrics.eu×1
  • www.googletagmanager.com×1

Social

Registration

Updated
2009-09-02
Name servers
  • pns.dtag.de.
  • pns.exxcellent.de.
  • secondary007.dtag.net.

DNS records live

NS
  • pns.dtag.de
  • pns.exxcellent.de
MX
  • 10 exxcellent-de.mail.protection.outlook.com
TXT
  • offensity-domain-verification=b7930fd8beab81c1773dcfd48efed994aa9b2bb242889d1864ee580540cddcd9
Verified for
  • Google

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:4331490.spf10.hubspotemail.net include:spf.lamapoll.de ip4:217.6.238.199 -all
strict (-all)
DMARC
v=DMARC1; p=quarantine
policy: quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jiW702fHkJJvBmSrGMYbB3HV6KZEsZGFRWS61/oELfqlYeBP7eiU/dsMoPnhz+ZQ/RQJfDl67EeL/…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHNLzel5ROYEVdegq0fO1OqIX7MBy1Xp+xx1I9snDCeDWvle/Pp2+r67SUhqFp2dgDxKYZWI31UKB9…
  • smtpapi: v=DKIM1;k=rsa;t=s;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByF…
selectors probed

Certificate (current)

R12
from 2026-04-23 to 2026-07-22
Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.exxcellent.de/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self' 'unsafe-inline'; script-src 'self' *.googletagmanager.com *.usercentrics.eu *.hs-scripts.com 'unsafe-inline' 'unsafe-eval' *.usemessages.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.cloudflare.com *.hubspot.com *.hsforms.net *.hsappstatic.com *.stripe.com static.hsappstatic.net *.google.com *.gstatic.com *.hsadspixel.net *.google-analytics.com *.youtube.com; connect-src 'self' 'unsafe-inline' *.usercentrics.eu *.hubspot.com *.hscollectedforms.net *.hs-forms.com *.amazonaws.com *.hsforms.com *.hubapi.com *.google-analytics.com; img-src * data:; style-src-elem 'self' *.googletagmanager.com *.usercentrics.eu 'unsafe-inline' fonts.googleapis.com; font-src 'self' 'unsafe-inline' *.googletagmanager.com *.gstatic.com *.sharepointonline.com data:; frame-src 'self' 'unsafe-inline' *.hubspot.com *.usercentrics.eu *.stripe.com *.hsforms.com *.google.com *.gstatic.com *.genial.ly *.genially.com *.vimeo.com *.youtube.com meeting.exxcellent.de js-eu1.hsforms.net

Links to (5)

Linked from (2)