indexo.dev

scaleunit.app

.app crawl

First seen 2026-04-22 · Last seen 2026-05-13 · ok HTTP/1.1 200 6012 ms crawled 2026-05-16

FR · 141.95.77.127 · AS16276 OVH SAS

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

DNS records live

NS
  • naomi.ns.cloudflare.com
  • rajeev.ns.cloudflare.com
MX
  • 10 mxa.eu.mailgun.org
  • 10 mxb.eu.mailgun.org
TXT
  • heritage=external-dns,external-dns/owner=default,external-dns/resource=httproute/kundenportal-prod/kundenportal-http

Email authentication partial

SPF
v=spf1 include:mailgun.org ~all
softfail (~all)
DMARC
v=DMARC1; p=none; pct=100; fo=1; ri=3600; rua=mailto:f36e1035@dmarc.mailgun.org,mailto:de954a3f@inbox.ondmarc.com; ruf=mailto:f36e1035@dmarc.mailgun.org,mailto:de954a3f@inbox.ondmarc.com;
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-04-10 to 2026-07-09
Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://login.scaleunit.app/auth?client_id=b879VMWjQKbCRS8urQ5tvUEzVmhB5Bjs&code_challenge=IhuGKsn3gUYG3wqgXgw_exTywHz6FC3gZIuzf_nHcqo&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fscaleunit.app%2Foauth2%2Fcallback&response_type=code&scope=openid%20email%20profile%20groups%20federated%3Aid&state=eyJ1cmwiOiJodHRwczovL3NjYWxldW5pdC5hcHAvIiwiY3NyZl90b2tlbiI6ImQzMDlmNzA4YWQ4NDcxMTUubXN3SzNxWXR5c05ZMlpSSVV4b0RyaFh3dnNUUlB2M3RxQnc1RlRrOXRKRT0ifQ

findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy

Linked from (1)