md-th.de

.de crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 2159 ms crawled 2026-05-14

DE · 185.237.64.188 · AS15817 Mittwald CM Service GmbH & Co. KG

Reputation 92/100 no dmarc policy

sector health type homepage

HTML metadata

Title: Medizinischer Dienst Thüringen
Language: de
Generator: TYPO3 CMS
Canonical: https://www.md-th.de/

Technology

Server: Apache

Contact

Phone

03643%20553%20-%200

Registration

Updated

2023-10-13

Name servers

ns0.de.clara.net.
ns1.de.clara.net.

DNS records live

NS

ns0.de.clara.net
ns1.de.clara.net

MX

10 md-th-de.mail.cloud.nospamproxy.com

TXT

iUdq9QDQb2hkhCszewQN/rvz4koJpNZm8bRIjTyafyU=
M0D4K20319

Verified for

Apple
Cisco

Email authentication weak

SPF: v=spf1 ip4:195.170.96.14 ip4:188.94.250.245 ip4:212.82.225.203 ip4:212.82.225.204 include:agenturserver.de include:spf.md-th-de.cloud.nospamproxy.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-03-31 to 2026-06-29

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.md-th.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(*), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), window-placement=(), vertical-scroll=()
x-content-type-options: nosniff
content-security-policy: style-src 'self' 'unsafe-inline'
strict-transport-security: max-age=31536000