thex.de

.de crawl

First seen 2026-04-15 · Last seen 2026-05-16 · ok HTTP/1.1 200 658 ms crawled 2026-05-10

DE · 185.57.24.24 · AS3320 Deutsche Telekom AG

Reputation 94/100 dmarc monitor-only

sector other type landing page

HTML metadata

Title: Homepage ThEx - ThEx - Thüringer Zentrum für Existenzgründungen und Unternehmertum
Language: de
Canonical: https://thex.de/

Open Graph

url: https://thex.de/
title: Homepage ThEx - ThEx - Thüringer Zentrum für Existenzgründungen und Unternehmertum
locale: de
site name: ThEx - Thüringer Zentrum für Existenzgründungen und Unternehmertum
locale:alternate: de

Social

Contact

Email

Phone

08000 843 933

Registration

Updated

2024-02-09

Name servers

ns1.telekom-domains.de.
ns2.telekom-domains.de.

DNS records live

NS

ns1.telekom-domains.de
ns2.telekom-domains.de

MX

10 mail1.aufbaubank.de
20 mail2.aufbaubank.de
30 mail1.tab.thueringen.de

TXT

MS=ms21379031

Email authentication partial

SPF

v=spf1 a mx a:vwp0103.webpack.hosteurope.de a:mail1.aufbaubank.de a:mail2.aufbaubank.de include:spf.nl2go.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; fo=1; rua=mailto:Rua-dmarc@aufbaubank.de; ruf=mailto:Ruf-dmarc@aufbaubank.de;adkim=r;aspf=r

policy: none (monitoring only)

DKIM

default: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DeL2/ha72copU91FZ1DFKf40XA9IDh6QdAYi6MBwlp298AKrphyEfkBDtgcy/DKyMFGQXlxKqC75pBjqh5Q7…

selectors probed

Certificate (current)

R12

from 2026-02-20 to 2026-05-21

Expires in 2 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://thex.de/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: default-src 'self' thex-award.de *.thex-award.de thex.de *.thex.de always; img-src 'self' thex-award.de *.thex-award.de thex.de *.thex.de https://img.youtube.com https://i.ytimg.com data:; script-src 'self' thex-award.de *.thex-award.de thex.de *.thex.de 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem 'self' thex-award.de *.thex-award.de thex.de *.thex.de 'unsafe-inline' https://matomo.aufbaubank.de/matomo.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://npmcdn.com/flatpickr@4.6.9/dist/l10n/de.js; style-src 'self' thex-award.de *.thex-award.de thex.de *.thex.de 'unsafe-inline' https://fonts.googleapis.com/css https://fonts.gstatic.com; font-src 'self' thex-award.de *.thex-award.de thex.de *.thex.de data:; frame-src 'self' thex-award.de *.thex-award.de thex.de *.thex.de https://www.youtube.com/; connect-src 'self' https://matomo.aufbaubank.de https://feed-proxy.craftcms.com https://api.craftcms.com https://api.friendlycaptcha.com/; frame-ancestors 'se
strict-transport-security: max-age=15768000