indexo.dev

tui4u.de

.de crawl

First seen 2026-04-15 · Last seen 2026-05-14 · ok HTTP/1.1 200 7283 ms crawled 2026-05-10

DE · 18.193.41.174 · AS16509 Amazon.com, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Willkommen bei TUI 4U | TUI 4U GmbH
Language
de
Generator
Drupal 10 (https://www.drupal.org)
Canonical
http://www.tui4u.de/startseite
Translations
  • de

Technology

Server
Apache
CMS
Drupal

Registration

Updated
2021-08-18
Name servers
  • ns1.telekom.net.
  • pns.dtag.de.

DNS records live

NS
  • ns1.telekom.net
  • pns.dtag.de
MX
  • 0 tui4u-de.mail.protection.outlook.com
TXT
Show 7 TXT records
  • _ldp4fnbebn69gi964mf5cfcrhnuiog2
  • t8ps4szbrqmqtx921kqf2vk0051zhsgf
  • lnz566l1jvjyw6gzkyd8nl3cc3x3n4c9
  • z9r9y9bdbxbjyfcbn5r33zcdsh8f1h4d
  • yrk8XimzF47qXNOU8roNKhuK1+jgJSl9Nn3WrvoNlcd7ViNB67FzUQAT/AtJ8aEUQP4euXuePgTaviQ2MJHooA==
  • _pp6xl57632o4jlj51xviglywc667qud
  • MS=ms61601788

Email authentication strong

SPF
v=spf1 ip4:62.154.143.4/32 ip4:62.154.143.6/32 ip4:80.228.3.162/32 ip4:83.236.198.163/32 ip4:85.214.194.139/32 ip4:85.214.149.64/32 include:spf.protection.outlook.com include:mail.tuigroup.com include:_spft.include.airquest.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:2256e681@inbox.ondmarc.com; ruf=mailto:2256e681@inbox.ondmarc.com
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf1rmKwMBjLKSl1ERhnoxoCBj4vVjPXSKCRZwj9Kzfwp2oabIDQMQSY4bKw0cpcjTEb908DlZhgQR4…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWkQNVD6xXzhkyNVTdXUtL8rztu+NyAeIrw5hD5lkgQ2X0iXLmDGBfphddCAp9fFLfkk2gut30nNx7…
selectors probed

Certificate (current)

Thawte TLS RSA CA G1
from 2025-05-21 to 2026-05-21
Expires in 1 day

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.tui4u.de/

present
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • missing Content Security Policy
  • weak frame protection
  • weak content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN, SAMEORIGIN
x-content-type-options
nosniff, nosniff

Linked from (1)