unternehmensregister.de

.de crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 1854 ms crawled 2026-05-18

DE · 128.65.211.50 · AS34309 Link11 GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Unternehmensregister - Die zentrale Plattform zu Unternehmensdaten
Language: de

Technology

CMS: Next.js

Contact

Phone

Registration

Updated

2025-11-04

Name servers

ns1.plusserver.com.
ns2.plusserver.com.
ns3.plusserver.com.

DNS records live

NS

ns1.plusserver.com
ns2.plusserver.com
ns3.plusserver.com

MX

10 mx.openit.de
20 mx02.openit.de

TXT

Show 4 TXT records

_vn9p2olnv75svplhlkhmgciunro9qy4
_f4a0pcg42xgf5d814t3rd6736apj64n
_l5qy1vf468hlzjat2ua4iaqmqdztbyt
_gocog53jzh1nkb9ir7yy5eeoef4t7i6

Verified for

GlobalSign
Google

Email authentication weak

SPF

v=spf1 mx ip4:87.119.201.88/29 ip4:213.95.27.166 ip4:213.155.94.225 ip4:213.155.73.199 ~all

softfail (~all)

DMARC

not published

DKIM

default: v=DKIM1; h=sha256; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0nNHQCmUt+Mqi4PyxVk0P7LqcGeR92x9a3maKCWT9Luvo2nATaG+NwTtLd6ysQzLV1IQ/L37c…

selectors probed

Certificate (current)

GlobalSign GCC R3 EV QWAC CA 2020

from 2025-08-07 to 2026-09-08

Expires in 111 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://unternehmensregister.de/de

present

strict-transport-security
content-security-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://widget.moin.ai; connect-src 'self' https://api.moin.ai wss://bot.moin.ai; style-src 'self' 'unsafe-inline' https://widget.moin.ai; img-src 'self' blob: data: https://media.moin.ai; font-src 'self' https://widget.moin.ai; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=63072000; includeSubDomains; preload