qt.eu

.eu crawl

First seen 2026-04-17 · Last seen 2026-05-13 · ok HTTP/1.1 200 3129 ms crawled 2026-05-12

DE · 185.146.238.79 · AS38927 Net-Build GmbH

Reputation 92/100 no dmarc policy

sector tech type homepage

HTML metadata

Title: Homepage of Quantum Flagship | Quantum Flagship
Description: Homepage of Quantum Flagship
Language: en-GB
Canonical: https://qt.eu/

Open Graph

url: https://qt.eu/
title: The future is Quantum
site name: Quantum Flagship
description: The Second Quantum Revolution is unfolding now, exploiting the enormous advancements in our ability to detect and manipulate single quantum objects. The Quantum Flagship is driving this revolution in Europe.

Technology

Server: nginx

Third-party hosts loaded (1)

consent.cookiebot.eu×1

Social

Contact

Email

info@qt.eu

Phone

101070193

DNS records live

NS

ns1.net-server.de
ns2.net-server.de

MX

0 mail.qt.eu

TXT

google-site-verification=wU3_tjZrPVyQ_wfjVE74iELG3APZBem4IYMcKJ576_Q

Email authentication weak

SPF: v=spf1 ip4:80.82.206.0/26 ip4:185.98.184.0/24 ip4: 185.146.238.79/32 -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-09-12 to 2026-10-14

Expires in 147 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://qt.eu/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin
x-frame-options: sameorigin;
x-content-type-options: nosniff;
content-security-policy: worker-src 'self' blob: data:; default-src 'self'; script-src 'self' 'unsafe-inline' update.webedition.org *.cookiebot.com *.cookiebot.eu *.vditz.com *.googleapis.com *.google.com *.youtube.com *.vimeo.com *.twitter.com; style-src 'self' *.googleapis.com 'unsafe-inline'; img-src data: 'self' *.usercentrics.eu *.ytimg.com *.vimeocdn.com *.gstatic.com *.googleapis.com *.twitter.com; font-src 'self' *.gstatic.com; connect-src 'self' *.cookiebot.com *.cookiebot.eu *.googleapis.com stats.vditz.com; base-uri 'self'; media-src blob: 'self' *.youtube.com *.vimeo.com; frame-src 'self' update.webedition.org *.qt.eu *.cookiebot.com *.cookiebot.eu *.vditz.com *.google.com *.youtube.com *.youtube-nocookie.com *.vimeo.com *.twitter.com; object-src 'none'; frame-ancestors 'self';
strict-transport-security: max-age=300; includeSubDomains;