emp.de

HTML metadata

Title

EMP Fanartikel & Rockshop • Merchandise für Band & Filmfans

Description

Über 25.000 Fanartikel ★ Heavy Metal ★ Entertainment & Fashion Produkte ★ Kostenloser Versand im EMP Backstageclub.

Language

de

Canonical

https://www.emp.de

Translations

cs-cz
da-dk
de-at
de-ch
de-de
en-gb
en-gr
en-ie
en-pt
es-es
fi-fi
fr-be
fr-ch
fr-fr
it-it
nl-be
nl-nl
no-no
pl-pl
sk-sk
sv-se

Open Graph

url: https://www.emp.de/on/demandware.store/Sites-GLB-Site?wt_eid=6175776983679831091&wt_t=1779107632939
title: EMP Merchandise | Fanartikel Shop für Rock & Entertainment
site name: E.M.P. Merchandising Handelsgesellschaft mbH
description: Über 30.000 Fanartikel ✓ Heavy Metal, Rock & Entertainment Produkte ✓ Exklusive Editionen & Marken ✓ Kostenloser Versand im EMP Backstageclub.

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (21)

cdn.cquotient.com×3
cdn.appdynamics.com×2
cdn.jsdelivr.net×2
www.emp-online.ch×2
www.emp-online.com×2
www.large.be×2
static.cloudflareinsights.com×1
www.emp-online.es×1
www.emp-online.fr×1
www.emp-online.it×1
www.emp-shop.cz×1
www.emp-shop.dk×1
www.emp-shop.no×1
www.emp-shop.pl×1
www.emp-shop.se×1
www.emp-shop.sk×1
www.emp.at×1
www.emp.co.uk×1
www.emp.fi×1
www.emp.ie×1
www.large.nl×1

Social

Registration

Updated

2025-06-24

Name servers

ns.udag.de.
ns.udag.net.
ns.udag.org.

DNS records live

NS

ns.udag.de
ns.udag.net
ns.udag.org

MX

10 de-smtp-inbound-1.mimecast.com
10 de-smtp-inbound-2.mimecast.com

TXT

Show 10 TXT records

ykfLCVdcfXd9EURYdBkyunqHYDW1JkFvYBS/azBIb+gYWVdO4mCab8LuV4XkRxtiTykBczyLRhNEgcr0aOmEBw==
google-site-verification=wfcVfK2vKODwwmVisGp9nSy2dkO2oXMWRcLblWOcgcI
0ed1fe018ae5efc7c33f8a40e19a0a8135182f639b
facebook-domain-verification=rn28pn08icjh5fig3yfbykerk9r4s9
atlassian-domain-verification=NJUKXECFnFBdnrpY8WHBCQJTs7lzraKKFkVZv9S4YftjruapQMXTluJ6Ok4O4877
yE3Xki7flCvyJV+uieQ+zT+pzwtH6GLQwRjvWM13j3gUkz+z+ym0nX9BAFLulcxyickid5BkPxRAjGIu10BbtA==
MQbLZ33vfJNbFX3pqX8LjdhpiY8HHfiQ/A7YvZ/MCY2jXK3/JFU2a1xgICRF+7IcPjeS2vjMYYOT5GH5DfxQ/Q==
google-site-verification=TxtNLthbquAK3Ut3sfb7XXBidLokyMdwoHPRXDbnPEU
apple-domain-verification=Hk7KMVA0oaZiy1Lc
extensis-domain-verification=bb45217c-adfe-41d9-b46e-bdcf92220c54

Email authentication strong

SPF: v=spf1 include:de._netblocks.mimecast.com include:spf.mandrillapp.com include:amazonses.com include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; rua=mailto:22f629d9e0ea718@rep.dmarcanalyzer.com; ruf=mailto:22f629d9e0ea718@for.dmarcanalyzer.com; fo=1;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-06 to 2026-07-05

Expires in 46 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.emp.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://tags.creativecdn.com https://lensflare.vimeo.com https://arclight.vimeo.com https://player.vimeo.com https://cdn.cquotient.com https://www.googletagmanager.com https://services.postcodeanywhere.co.uk https://*.dynamicyield.com https://empme11111.pcapredict.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://*.google-analytics.com https://*.doubleclick.net https://*.dwin1.com https://*.facebook.net https://*.bing.com https://*.criteo.net https://*.stylight.net https://*.linkfire.com https://*.pinimg.com https://*.adsrvr.org https://sc-static.net https://*.tiktok.com https://*.kuponacdn.de https://*.ad-srv.net https://ad4m.at https://*.ad4m.at https://*.bounce-commerce.de https://*.usemaxserver.de https://*.soreto.com https://*.gsitrix.com https://*.snapchat.com https://*.clarity.ms https://*.criteo.com https://*.paypal.c
strict-transport-security: max-age=31536000