indexo.dev

tolli-park.de

.de crawl

First seen 2026-05-10 · Last seen 2026-05-16 · ok HTTP/1.1 200 4688 ms crawled 2026-05-16

DE · 85.13.164.135 · AS34788 Neue Medien Muennich GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Freizeitpark & Indoorspielplatz in Mayen - Tolli Park
Description
Freizeitpark & Indoorspielplatz in Mayen - Tolli Park
Language
de
Generator
WordPress 6.9.4
Canonical
https://www.tolli-park.de/
Feeds

Open Graph

url
https://www.tolli-park.de/
title
Tolli-Park Mayen - Freizeitpark in RLP
locale
de_DE
site name
Herzlich willkommen im Tolli Park
description
Freizeitpark & Indoorspielplatz in Mayen - Tolli Park

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager

Third-party hosts loaded (6)

  • cdnjs.cloudflare.com×6
  • cdn.jsdelivr.net×5
  • www.googletagmanager.com×4
  • cdn.elementor.com×2
  • cdn.trustindex.io×1
  • gmpg.org×1

Social

Registration

Updated
2020-09-06
Name servers
  • a-dns-service.de.
  • ns3.kas-dns-server.de.
  • ns5.kasserver.com.
  • ns6.kasserver.com.

DNS records live

NS
  • a-dns-service.de
  • ns3.kas-dns-server.de
  • ns5.kasserver.com
  • ns6.kasserver.com
MX
  • 10 mx01.hornetsecurity.com
  • 20 mx02.hornetsecurity.com
  • 30 mx03.hornetsecurity.com
  • 40 mx04.hornetsecurity.com
Verified for
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 ip4:85.13.163.83 include:spf.protection.outlook.com include:spf.hornetsecurity.com include:kasserver.com include:spf.crsend.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject;
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-04-17 to 2026-07-16
Expires in 57 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 35/100 Checked live page: https://www.tolli-park.de/

present
  • permissions-policy
findings
  • missing HSTS
  • missing Content Security Policy
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
Header values
permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")

Links to (4)

Linked from (1)