indexo.dev

nuessing.de

.de crawl

First seen 2026-04-17 · Last seen 2026-05-14 · ok HTTP/1.1 200 1909 ms crawled 2026-05-12

DE · 92.39.30.34 · AS198967 BITel Gesellschaft fuer Telekommunikation mbH

Reputation 95/100 weak security headers

sector home type ecommerce

HTML metadata

Title
Nüßing Shop
Description
Der Türgriff Online-Shop
Language
de
Canonical
https://www.nuessing.de/

Open Graph

url
https://www.nuessing.de/
locale
de_DE
site name
Nüßing

Technology

Server
Apache
CMS
Gatsby

Social

Contact

Email
Phone
Address
rd HellwegVertrieb InnendienstFenster- und Türtechnik allgemein05246

Registration

Updated
2022-08-23
Name servers
  • ns01.iok.net.
  • ns02.iok.net.
  • ns03.iok.net.
  • ns04.iok.de.

DNS records live

NS
  • ns01.iok.net
  • ns02.iok.net
  • ns03.iok.net
  • ns04.iok.de
MX
  • 10 mx-01-eu-central-1.prod.hydra.sophos.com
  • 20 mx-02-eu-central-1.prod.hydra.sophos.com
TXT
Show 6 TXT records
  • _2qeh5avs76yuvzh0839yv2pr3c041vf
  • google-site-verification=upsWm07orVADM8dnF5v-yj7P4U810qwog8jxXj3V_Ac
  • google-site-verification=J4pgOC8xYcqkCmN0xcGTcyF3FfUJMMDR-WikMwZ-MyY
  • sophos-domain-verification=b04ad3fbbe87556388f8251803fcfe495b1b024b0ab354011928a040d167775b
  • apple-domain-verification=6sCGvtqgA4f2C6j5
  • sophos-domain-verification=03d9539ff771cd2d2b1648d7f396cf4d63d0b304

Email authentication strong

SPF
v=spf1 a:mail.nuessing.de include:de._netblocks.mimecast.com include:spf.emailsys.net include:_spf.nuessing.de include:spf.hornetsecurity.com include:_spf_eucentral1.prod.hydra.sophos.com -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; pct=100; adkim=r; aspf=r
policy: quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHmazhpZrYhpQz6o0/4e8mS+bp4n0LuCSFhVasOWQf/B381ZA+1vO+6PmJIbVQax29++VcULyJlhdZm5MED0…
  • selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2Cr/XNgEjW55H9EBgPRpe+fZOPNw4Ye1UW9sTxer96fGJv2+2MKZ0o5DYigROEucxm2Wd3qKhDqAYlHj+7v…
selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1
from 2025-06-10 to 2026-07-12
Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://nuessing.de/

present
  • content-security-policy
  • x-frame-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
allow-from https://shopproxy.p-s-s.de
content-security-policy
frame-ancestors 'self' https://shopproxy.p-s-s.de ; style-src 'self' localhost:* https://vr-pay-ecommerce.de http://oxomi.com 'unsafe-inline'

Links to (9)

Linked from (2)