faf-messe.de

.de crawl

First seen 2026-04-12 · Last seen 2026-05-14 · ok HTTP/1.1 200 8704 ms crawled 2026-05-05

DE · 138.201.1.23 · AS24940 Hetzner Online GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title

FAF | Die Leitmesse für Fassadengestaltung und Raumdesign

Description

FAF ist die digitale Erweiterung der Messe FAF - FARBE, AUSBAU & FASSADE. Anbieter präsentieren, Beiträge und Veranstaltungen rund um Fassadengestaltung und Raumdesign. Nehmen auch Sie teil!

Language

de-DE

Canonical

https://www.faf-messe.de/de/

Translations

de-de
en

Technology

Server: nginx

Third-party hosts loaded (1)

consent.cookiefirst.com×1

Social

Contact

Phone

+4989189149551

Registration

Updated

2020-10-16

Name servers

pri.mordac.de.
sec.mordac.de.

DNS records live

NS

pri.mordac.de
sec.mordac.de

MX

10 dedi2185.your-server.de

TXT

d365mktkey=clhTFQCxT6zgeYxFN4DY8pWESeZPQfVfi5SUzxxs6Oox
v=spf1 include:spf_smtp1.ghm.de include:spf_momentus.ghm.de include:_spf.eu.messagegears.net include:amazonses.com -all

Certificate (current)

R12

from 2026-04-29 to 2026-07-28

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.faf-messe.de/de/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.adform.net *.adsrvr.org *.adspirit.de *.azureedge.net *.bing.com *.bing.net connect.facebook.net *.clickdimensions.com *.cookiefirst.com *.corussoft.de core.service.elfsight.com ihm.de *.ihm.de *.doubleclick.net *.dynamics.com dynamics.com *.elfsightcdn.com elfsightcdn.com elfsight.com *.elfsight.com *.event-cloud.com *.facebook.com *.facebook.net ghm.de *.ghm.de *.google.com *.google.de *.google.cz *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com id5-sync.com *.instagram.com *.licdn.com *.linkedin.com *.microsoft.com myconvento.com *.myconvento.com *.outbrain.com *.oribi.io *.pinterest.com *.podigee.io *.podigee-cdn.net pollunit.com *.pollunit.com *.vimeo.com *.sascdn.com *.stape.de *.tiktok.com s3-eu-central-1.amazonaws.com s3-eu-west-1.amazonaws.com *.siteground.com *.smartadserver.com *.squarecdn.com squarecdn.com *.taboola.com *.twitter.com *.youtube.com *.youtube-noc