indexo.dev

masterlin.com

.com crawl

First seen 2026-05-31 · Last seen 2026-06-01 · ok HTTP/1.1 200 4506 ms crawled 2026-06-01

CH · 81.173.84.156 · AS47692 Nessus GmbH

Reputation 79/100 multiple spf records dmarc monitor-only

Classifying

HTML metadata

Title
Master Lin - Hochwertige Pflege - Natural Skin Care
Description
Premium Pflege auf Naturbasis aus Österreich. Entdecken Sie unsere Produkte & shoppen Sie online. Gratisversand. Neu: Marvellous Hydrating Mask
Language
de-DE
Generator
WPML ver:4.5.13 stt:1,3;
Canonical
https://www.masterlin.com/
Translations
  • de
  • en

Open Graph

url
https://www.masterlin.com/
title
Master Lin - Hochwertige Pflege - Natural Skin Care
locale
de_DE
site name
Master Lin
description
Premium Pflege auf Naturbasis aus Österreich. Entdecken Sie unsere Produkte & shoppen Sie online. Gratisversand. Neu: Marvellous Hydrating Mask

Technology

Server
nginx
CMS
WordPress
jQuery
3.7.1
Analytics
  • Google Tag Manager

Third-party hosts loaded (2)

  • www.googletagmanager.com×3
  • www.google.com×1

Social

Registration

Registrar
Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
Created
2004-06-15
Expires
2026-06-15 10 days left
Updated
2025-07-18
Name servers
  • ns1.easyname.eu
  • ns2.easyname.eu

DNS records live

NS
  • ns1.easyname.eu
  • ns2.easyname.eu
MX
  • 5 masterlin-com.mail.protection.outlook.com

Email authentication weak

SPF
v=spf1 include:spf.easyname.com +a +mx -all
strict (-all) · multiple SPF records
DMARC
v=DMARC1; p=none;
policy: none (monitoring only)
DKIM
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

R12
from 2026-05-04 to 2026-08-02
Expires in 58 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.masterlin.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
accelerometer=(self), autoplay=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(self), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options
nosniff
content-security-policy
upgrade-insecure-requests; default-src 'self' https: wss: blob: fbrpc://call; base-uri 'self'; connect-src 'self' https: wss://ws.hotjar.com blob: https://connect.facebook.net; font-src 'self' https: data:; form-action 'self' https://www.facebook.com; frame-ancestors 'self' https://www.masterlin.com; frame-src 'self' blob: https://www.facebook.com https://*.doubleclick.net https://maps.google.com https://www.google.com https://www.googletagmanager.com https://player.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com https://youtu.be https://js.stripe.com https://www.paypal.com; img-src 'self' https: data: blob: android-webview-video-poster:; media-src 'self' https: data:; object-src 'self'; script-src 'self' https: data: 'unsafe-inline' 'unsafe-eval' blob: wasm-unsafe-inline; script-src-elem 'self' https: data: blob: 'unsafe-inline'; style-src 'self' https: data: 'unsafe-inline'; worker-src 'self' https: blob:; report-uri https://csp.spinnwerk.at
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (8)

Linked from (1)