fitx.de

.de crawl

First seen 2026-04-13 · Last seen 2026-05-16 · ok HTTP/1.1 200 1918 ms crawled 2026-05-06

DE · 3.76.229.13 · AS16509 Amazon.com, Inc.

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title: FitX Fitnessstudio | inkl. Kurse, Getränke, Duschen – 24/7
Description: Muskeln, Ausdauer, Kurse, Entspannung: Fitness ist vieles. FitX kann alles. Für nur 29,00 Euro. Hier erfährst du mehr.
Language: de-DE
Canonical: https://www.fitx.de/

Open Graph

url: https://www-prd.fitx.de/
title: FitX Fitnessstudio | inkl. Kurse, Getränke, Duschen – 24/7
locale: de_DE
description: Muskeln, Ausdauer, Kurse, Entspannung: Fitness ist vieles. FitX kann alles. Für nur 29,00 Euro. Hier erfährst du mehr.

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (5)

images.ctfassets.net×5
app.varify.io×1
use.typekit.net×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Address: Rolf-Schwarz-Schütte-Platz 2, 40789, Monheim am Rhein, DE

Registration

Updated

2025-01-23

Name servers

ns-1243.awsdns-27.org.
ns-1597.awsdns-07.co.uk.
ns-74.awsdns-09.com.
ns-867.awsdns-44.net.

DNS records live

NS

ns-1243.awsdns-27.org
ns-1597.awsdns-07.co.uk
ns-74.awsdns-09.com
ns-867.awsdns-44.net

MX

0 fitx-de.mail.protection.outlook.com

TXT

Show 8 TXT records

miro-verification=f7a31e9b69b4030c175c254c1737f3e3bef06f5f
MS=ms40453932
MS=ms64887720
amazonses:222iVe2dvTRp6ypfuQXibslP2oJRZrTn94zjjDXtvRo=
apple-domain-verification=JmkEo9RsbXSKJmjX
atlassian-domain-verification=2eOFwmUZSela5OULrsHzFgYlOMpFdsYyigwmUWnIfK5bN3dPeQsQGweViMvzSEtW
atlassian-domain-verification=WsaufZA3diol6KGa7hdTFej1SrkXn3vEocpNqu0tybsyRf1e1Hm9VnplbN6ei0kw
google-site-verification=EsVyxmSKR3PKQwCxngHHTEoTVYY8d2vVuJ5ZnjSZrYk

Email authentication strong

SPF

v=spf1 mx ip4:89.245.149.11 include:spf.planoncloud.com include:mail.zendesk.com include:spf.protection.outlook.com include:spf.eu.exclaimer.net include:_spf.zimpel.de include:spf.mailjet.com include:amazonses.com include:spf.crsend.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

EUNETIC RSA Domain Validation Secure Server CA 4

from 2026-04-25 to 2026-11-10

Expires in 175 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.fitx.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: midi=(),microphone=(),camera=(),fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src blob:; frame-ancestors 'self' https://one.sitrion.com; img-src * data:; connect-src * blob:;
strict-transport-security: max-age=31536000; includeSubDomains