milchundzucker.de

.de crawl dns

First seen 2026-04-13 · Last seen 2026-05-09 · ok HTTP/1.1 200 388 ms crawled 2026-05-06

US · 199.60.103.50 · AS209242 Cloudflare London, LLC

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title: Wer wir sind - milch & zucker
Description: Als HR Pioniere entwickeln wir Lösungen und Technologien, die Sie bei der Gewinnung Ihrer wertvollsten Ressource unterstützen: passenden Mitarbeitenden.
Language: de
Generator: HubSpot
Canonical: https://www.milchundzucker.de

Open Graph

url: https://www.milchundzucker.de
title: Wer wir sind - milch & zucker
description: Als HR Pioniere entwickeln wir Lösungen und Technologien, die Sie bei der Gewinnung Ihrer wertvollsten Ressource unterstützen: passenden Mitarbeitenden.

Technology

CDN: Cloudflare

Social

Registration

Updated

2018-04-16

Name servers

ns.plusline.de.
ns.s.plusline.de.

DNS records live

NS

ns.plusline.de
ns.s.plusline.de

MX

5 mailgw.milchundzucker.de

TXT

Show 6 TXT records

adobe-idp-site-verification=1ab58e56a7c5cfcf85df9cf0e34dc26505b7982a08fd338b70244c5611b99242
atlassian-domain-verification=ToT4Egb9lnh2zX/P8lNcG2Y1XNf52iV9akfzwa/83mjPUXxawXrQlFHmN3aBSPgO
MS=ms55518631
cisco-ci-domain-verification=435cbf96704173fe27187b51090203f1dd2e65396f0ff46619fb13c4f7c958a8
uhcDnUdBEjP4Z30kVfTeIgWJwdSNIpTajISlPEn85rgbAv144Xpch1Pier9p7qEqKi4/5HO6cgBs05pe73p6DQ==
apple-domain-verification=LFJEf49AFWCdBd7R

Email authentication strong

SPF: v=spf1 mx ip4:212.19.57.143/32 ip4:212.19.45.205/32 include:143521049.spf04.hubspotemail.net include:spf.protection.outlook.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:dmarc@milchundzucker.de
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

from 2026-04-01 to 2026-06-30

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.milchundzucker.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: geolocation=(), camera=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; connect-src *; font-src * data:; object-src *; media-src *; frame-src *; worker-src *; manifest-src *; base-uri *; form-action *; frame-ancestors *; upgrade-insecure-requests; block-all-mixed-content;
strict-transport-security: max-age=31536000; includeSubDomains; preload