falcrealestate.com
HTML metadata
Technology
- CDN
- Amazon CloudFront
- CMS
- Next.js
Social
Contact
- Phone
Registration
- Registrar
- InterNetX GmbH
- Created
- 2021-05-18
- Updated
- 2025-05-19
- Name servers
-
- nsa4.schlundtech.de
- nsb4.schlundtech.de
- nsc4.schlundtech.de
- nsd4.schlundtech.de
DNS records live
- NS
-
- nsa4.schlundtech.de
- nsb4.schlundtech.de
- nsc4.schlundtech.de
- nsd4.schlundtech.de
- MX
-
- 10 falcrealestate-com.mail.protection.outlook.com
- TXT
-
google-site-verification=NSkgWmFh1A6KHGkjGtWK1NF-FAYBFo3jSi-R8U6UkSEMS=ms11046363google-site-verification=pBjC7QdW3XyVwgnn_CrgZHjj8v50c3qfbry2n5MdnDc
Email authentication partial
- SPF
-
v=spf1 mx ip4:85.214.187.37 ip4:176.9.46.194 ip4:85.13.147.40 ip4:185.166.22.178 include:amazonses.com include:spf.protection.outlook.de include:agenturserver.de ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;rua=mailto:it-support@falcimmo.de;pct=100;ruf=mailto:it-support@falcimmo.de;fo=0:d:s;aspf=r;adkim=r;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
Amazon RSA 2048 M04
Expires in 114 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
camera=(), microphone=(), geolocation=(), browsing-topics=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://*.google-analytics.com https://api.falcrealestate.com https://api.storyblok.com https://mapi.storyblok.com https://app.immoviewer.com https://app.areabutler.de https://my.matterport.com https://www.urnova.com https://agents.aedashomes-international.com https://www.youtube.com https://youtu.be https://*.googleapis.com; frame-src 'self' https://www.youtube.com https://youtu.be https://player.vimeo.com https://vimeo.com https://player.momenzo.com https://tour.ogulo.com https://app.areabutler.de https://app.immoviewer.com https://my.matterport.com https://www.urnova.com https://agents.aedashomes-international.com; script-src 'self' https://*.googletagmanager.com https://*.googleapis.com https://app.storyblok.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' https://*.googleapis.com 'unsafe-inline'; img-src 'self' https://images.propstack.de https://*.googleapis.com https://maps.gstatic.com https://*.storyblok.com blob: data:; font-src 'self' http- strict-transport-security
max-age=31536000; includeSubDomains; preload