elvb-immo.de

.de crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 6308 ms crawled 2026-05-16

BE · 185.175.196.41 · AS34762 Combell NV

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Ihr Immobilienmakler im Emsland | Emsländische Volksbank eG
Description: Ihre erfahrenen Makler im Emsland & der Grafschaft Bentheim für Bewertung, Verkauf und Kauf von Immobilien. Lernen Sie uns kennen!
Language: de-DE
Canonical: https://www.elvb-immo.de/

Open Graph

url: https://www.elvb-immo.de/
title: Ihr Immobilienmakler im Emsland | Emsländische Volksbank eG
locale: de_DE
site name: Emsländische Volksbank eG
description: Ihre erfahrenen Makler im Emsland & der Grafschaft Bentheim für Bewertung, Verkauf und Kauf von Immobilien. Lernen Sie uns kennen!

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (7)

acnaayzuen.cloudimg.io×19
privacy-proxy.usercentrics.eu×3
web.cmp.usercentrics.eu×3
app.usercentrics.eu×1
code.etracker.com×1
gmpg.org×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

Address

Lookenstraße 18-20, 49808, Lingen, NI, DE

Registration

Updated

2026-02-17

Name servers

nsa2.schlundtech.de.
nsb2.schlundtech.de.
nsc2.schlundtech.de.
nsd2.schlundtech.de.

DNS records live

NS

nsa2.schlundtech.de
nsb2.schlundtech.de
nsc2.schlundtech.de
nsd2.schlundtech.de

MX

10 mx1.onoffice.de
10 mx2.onoffice.de
20 mx3.onoffice.de

Email authentication partial

SPF: v=spf1 a mx include:onoffice.de ~all
softfail (~all)
DMARC: v=DMARC1; p=none
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-27 to 2026-07-26

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.elvb-immo.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-0ce0cb1a52' 'unsafe-inline' 'unsafe-eval' blob: https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin