medipolis.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1052 ms crawled 2026-05-04

DE · 193.41.237.251 · AS58212 dataforest GmbH

Reputation 100/100

Classifying

HTML metadata

Title: Medipolis – Medipolis
Description: Medipolis ist Ihr pharmazeutisch-pflegerischer Komplettversorger aus Jena. Das Familienunternehmen arbeitet nach dem Prinzip der integrierten Pharmazie.
Language: de
Generator: TYPO3 CMS
Canonical: https://www.medipolis.de/

Open Graph

title: Medipolis
description: Medipolis ist Ihr pharmazeutisch-pflegerischer Komplettversorger aus Jena. Das Familienunternehmen arbeitet nach dem Prinzip der integrierten Pharmazie.

Technology

Server: nginx

Social widgets

YouTube Embed

Third-party hosts loaded (1)

www.youtube-nocookie.com×1

Social

Contact

Phone

+49364162840000

Registration

Updated

2023-03-30

Name servers

ns1.resellerinterface.de.
ns2.resellerinterface.de.
ns3.resellerinterface.de.

DNS records live

NS

ns1.resellerinterface.de
ns2.resellerinterface.de
ns3.resellerinterface.de

MX

10 mail.convales.de

TXT

v=spf1 mx a:production.web.medipolis.demandware.net ip4:80.149.151.66 include:_spf.salesforce.com ip4:193.41.237.251 ~all
xtnoQ3KvJG4wPIqncuvw5m4J3vqkiLN+FNhA+I4AjsfKDCvI/l4Wh1OlItMDg0Xu0J0lqkPoOHW/j2BgN/mqyQ==

Verified for

Apple
Atlassian
Cisco
Google

Certificate (current)

R12

from 2026-04-20 to 2026-07-19

Expires in 59 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.medipolis.de/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' data: https://i.ytimg.com https://*.google-analytics.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://fonts.gstatic.com https://www.kununu.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://tagmanager.google.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com https://player.vimeo.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload