indexo.dev

xdnspro.de

.de dns crawl

First seen 2026-05-05 · Last seen 2026-05-18 · ok HTTP/1.1 200 1661 ms crawled 2026-05-11

DE · 116.202.9.166 · AS24940 Hetzner Online GmbH

Reputation 92/100 no dmarc policy

sector other type homepage

HTML metadata

Title
Reseller-Interface
Language
de

Technology

Server
nginx

Registration

Updated
2024-12-12
Name servers
  • ns1.xdnspro.de.
  • ns2.xdnspro.de.
  • ns3.xdnspro.de.

DNS records live

NS
  • ns1.xdnspro.de
  • ns2.xdnspro.de
  • ns3.xdnspro.de
MX
  • 0 mail.vipmail.app

Email authentication weak

SPF
v=spf1 mx a ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-04-03 to 2026-07-02
Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://my.xdnspro.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'none' ; manifest-src 'self' ;script-src 'self' 'nonce-edfe6e5ba0233eca48bcddd8274d48a1' 'report-sample'; style-src 'self' data: 'unsafe-inline' 'report-sample'; img-src * data:; font-src 'self' 'report-sample'; connect-src * ; media-src * ; object-src 'none' ; child-src * ; frame-src * ; worker-src 'self' blob: ; frame-ancestors 'self' ; form-action 'self' payment.multiapi.de *.paypal.com *.klarna.com; block-all-mixed-content; base-uri 'self' ;
strict-transport-security
max-age=31536000;