indexo.dev

heco-schrauben.de

.de crawl dns

First seen 2026-04-17 · Last seen 2026-05-12 · ok HTTP/1.1 200 1216 ms crawled 2026-05-12

DE · 49.12.127.241 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title
Home
Language
de-DE
Canonical
https://www.heco-schrauben.de/
Translations
  • de
  • en
  • fr
  • nl
Feeds

Open Graph

url
https://www.heco-schrauben.de/
title
Home
site name
HECO Schrauben

Technology

Server
nginx

Third-party hosts loaded (4)

  • consent.cookiefirst.com×1
  • www.heco-schrauben.com×1
  • www.heco-schrauben.fr×1
  • www.heco-schrauben.nl×1

Social

Registration

Updated
2025-10-22
Name servers
  • aurora.ns.cloudflare.com.
  • ned.ns.cloudflare.com.

DNS records live

NS
  • aurora.ns.cloudflare.com
  • ned.ns.cloudflare.com
MX
  • 10 mx01.badencloud.de
  • 10 mx02.badencloud.de
Verified for
  • Apple
  • Google

Email authentication strong

SPF
v=spf1 mx a ip4:212.227.137.153/32 ip4:217.160.92.67/32 a:mail.heco-schrauben.de a:www.heco-schrauben.de include:spf.dcpserver.de include:_spf-ipa.badencloud.de include:spf.protection.outlook.com include:spf.crsend.com include:ispgateway.de a:mx01.heco-schrauben.de ip4:134.119.247.151 ip4:62.214.69.156/29 ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; fo=s; pct=1; adkim=s; aspf=r
policy: quarantine · pct=1
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVanpQfC74gOaBwK/AiXP7rEQKD5UVMAnUDOtHQb71eovRIQ6QZzpCEW8f2xYnz+6MKdy/oUeYQZJTPvTosE…
selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1
from 2025-06-11 to 2026-06-12
Expires in 22 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.heco-schrauben.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(), midi=(), camera=(), usb=(), magnetometer=(), accelerometer=(), vr=(), speaker=(), ambient-light-sensor=(), gyroscope=(), microphone=()
x-content-type-options
nosniff
content-security-policy
frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiefirst.com *.cookiebot.com *.flockler.com *.userback.io *.googletagmanager.com;
strict-transport-security
max-age=31536000; includeSubDomains

Links to (9)

Linked from (5)