fedemac.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-14 · ok HTTP/1.1 200 5052 ms crawled 2026-05-17

US · 104.21.96.149 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: FEDEMAC
Description: Welcome to FEDEMAC, the homepage of the European Moving Industry. Find European Moving Companies. Look for Movers in Europe. Relocation Companies in the EU.
Language: en-US
Canonical: https://fedemac.com/

Open Graph

url: https://fedemac.com/
title: FEDEMAC
locale: en_US
site name: FEDEMAC
description: Welcome to FEDEMAC, the homepage of the European Moving Industry. Find European Moving Companies. Look for Movers in Europe. Relocation Companies in the EU.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (5)

ajax.googleapis.com×2
cdn.jsdelivr.net×2
maps.googleapis.com×2
www.google.com×2
www.googletagmanager.com×1

Registration

Registrar

GoDaddy.com, LLC

Created

1997-06-11

Expires

2026-06-10 21 days left

Updated

2025-06-10

Name servers

norm.ns.cloudflare.com
vera.ns.cloudflare.com

DNS records live

NS

norm.ns.cloudflare.com
vera.ns.cloudflare.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
40 aspmx3.googlemail.com

TXT

google-site-verification=ZUusCVR0kIVDc8NL7mbPFalAkkztQx7PkxMbDkztd9A
ca3-c2091aa5d89b4419a7c87a2ed6e47fe5

Email authentication weak

SPF

v=spf1 +a:ns1.esm27.siteground.biz include:_spf.mailspamprotection.com _spf.google.com ~all

softfail (~all)

DMARC

not published

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVJyAyO++Wn6taEiPYrPXc6jZ1XefgYB9QIDMD3RFKoX2Qca1Mq4CuQmDZcnYmud8VFHI+gcxA+8DP…
dkim: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+BwFIRfkW1MZJigyVgU2SSHXQHf1f1zVkE4OPIHMvgD9j8CrBUhqmNei4MKslivraD9K1SXgfzcV8obJSe2…

selectors probed

Certificate (current)

WE1

from 2026-05-01 to 2026-07-30

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://fedemac.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), geolocation=(self "https://fedemac.com"), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' code.jquery.com fedemac.com www.google-analytics.com *.cloudflare.com *.googleapis.com www.googletagmanager.com code.jquery.com www.google.com gstatic.com *.gstatic.com cdn.datatables.net fedemac.us9.list-manage.com static.cloudflareinsights.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' fedemac.com *.cloudflare.com *.googleapis.com cdn.datatables.net; img-src 'self' data: fedemac.eu secure.gravatar.com www.google-analytics.com *.gstatic.com developers.google.com *.googleapis.com; font-src 'self' data: 'unsafe-inline' fedemac.com fonts.googleapis.com fonts.gstatic.com; connect-src * cloudflareinsights.com; media-src *; child-src 'self'; frame-src *.google.com google.com 'self'; frame-ancestors 'self' google.com; form-action 'self'; upgrade-insecure-requests
strict-transport-security: max-age=15552000; includeSubDomains; preload
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-site