indexo.dev

ludwig-leiner.de

.de crawl

First seen 2026-04-30 · Last seen 2026-05-19 · ok HTTP/1.1 200 705 ms crawled 2026-05-07

DE · 93.184.181.29 · AS47297 NetCom BW GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Über uns - Ludwig Leiner
Description
Wir sind ein 1924 gegründetes, leistungsstarkes und in vierter Generation inhabergeführtes Großhandelshaus in Mannheim für Metallhalbzeuge und Haustechnikprodukte.
Language
de

Open Graph

url
https://www.ludwig-leiner.de/
title
Über uns
description
Wir sind ein 1924 gegründetes, leistungsstarkes und in vierter Generation inhabergeführtes Großhandelshaus in Mannheim für Metallhalbzeuge und Haustechnikprodukte.

Technology

CMS
Gatsby

Contact

Email
Phone

Registration

Updated
2012-02-06
Name servers
  • ns1.tcis.de.
  • ns2.tcis.de.

DNS records live

NS
  • ns1.tcis.de
  • ns2.tcis.de
  • ns3.tcis.de
MX
  • 10 mail.ludwig-leiner.de

Email authentication weak

SPF
v=spf1 mx include:spf.tomcom.de ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

E8
from 2026-03-21 to 2026-06-19
Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.ludwig-leiner.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
sameorigin
permissions-policy
microphone=*, fullscreen=*, accelerometer=*, autoplay=*, camera=*, display-capture=*, encrypted-media=*, geolocation=*, gyroscope=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=()
x-content-type-options
nosniff
content-security-policy
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: mediastream:; script-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline' data: blob: mediastream:; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * blob: data: 'unsafe-inline'; worker-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'
strict-transport-security
max-age=63072000; includeSubdomains;
cross-origin-opener-policy
unsafe-none
cross-origin-embedder-policy
unsafe-none
cross-origin-resource-policy
cross-origin

Links to (1)

Linked from (1)