indexo.dev

maximilian-schluer.com

.com crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 11274 ms crawled 2026-05-16

DE · 85.10.192.91 · AS24940 Hetzner Online GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Bug Sniper | Maximilian Schluer
Description
Software has to work perfectly – Therefore, I find all Bugs before your User does. Increased Revenue from genuine Satisfaction.
Language
en
Canonical
https://www.maximilian-schluer.com/

Open Graph

url
https://www.maximilian-schluer.com/
title
Bug Sniper | Maximilian Schluer
locale
en
site name
Maximilian Schluer
description
Software has to work perfectly – Therefore, I find all Bugs before your User does. Increased Revenue from genuine Satisfaction.

Technology

Server
nginx
CMS
Nuxt

Social

Contact

Phone

Registration

Registrar
RegistryGate GmbH
Created
2023-01-03
Expires
2027-01-03 227 days left
Updated
2026-01-04
Name servers
  • ns5.kasserver.com
  • ns6.kasserver.com

DNS records live

NS
  • ns5.kasserver.com
  • ns6.kasserver.com
MX
  • 10 mail.max-schluer.de
Verified for
  • Google

Email authentication partial

SPF
v=spf1 a mx include:spf.kasserver.com ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=postmaster@max-schluer.de
policy: none (monitoring only)
DKIM
  • mail: v=DKIM1; h=sha256; k=rsa; p=MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoEONk8IMo6SfPsZ7TSN8/uxfXBBUrFGli5r7+At99w/alkYhdWRsarqTM7XcXGQuGZ4T…
selectors probed

Certificate (current)

R12
from 2026-05-13 to 2026-08-11
Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.maximilian-schluer.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
no-referrer
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options
nosniff
content-security-policy
base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' https://backend.blog.max-schluer.de https://backend.blog.website.dev.max-schluer.de data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'nonce-6lzSLsyKL+NxFOEyP57iug=='; upgrade-insecure-requests;
strict-transport-security
max-age=15552000; includeSubDomains;, max-age=31536000
cross-origin-opener-policy
same-origin
cross-origin-embedder-policy
credentialless
cross-origin-resource-policy
same-origin

Links to (1)

Linked from (2)