for-me-online.de

.de crawl

First seen 2026-04-14 · Last seen 2026-05-18 · ok HTTP/1.1 200 1883 ms crawled 2026-05-07

US · 150.171.109.34 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title

ForMe: Zeit & Geld sparen

Description

Dein Begleiter, um im Alltag Zeit und Geld zu sparen: Entdecke Cashback-Aktionen, Produkttests, Gratisproben & Gewinnspiele auf ForMe!

Language

de-DE

Canonical

https://www.for-me-online.de/

Translations

de ×2
en

Open Graph

url: https://www.for-me-online.de/
title: ForMe: Cashback-Aktionen, Gratisproben & Produkttests
description: Dein Begleiter, um im Alltag Zeit und Geld zu sparen: Entdecke Cashback-Aktionen, Produkttests, Gratisproben & Gewinnspiele auf ForMe!

Technology

CDN: Azure Front Door
CMS: Gatsby

Third-party hosts loaded (1)

cdn-prd.pgjoltx.com×33

Social

Registration

Updated

2018-05-24

Name servers

ns1-05.azure-dns.com.
ns2-05.azure-dns.net.
ns3-05.azure-dns.org.
ns4-05.azure-dns.info.

DNS records live

NS

ns1-05.azure-dns.com
ns2-05.azure-dns.net
ns3-05.azure-dns.org
ns4-05.azure-dns.info

MX

10 mx00.for-me-online.de

TXT

Validity-Domain-Verification=zNxeZ+fetNknjDJRy34RkOT/U0I=
8851-6A5E-88DF-6E3A-3AA3-7BCA-108F-AC55
8717sgvo5tul3s5rb36mequdl5

Verified for

Google
Meta

Email authentication strong

SPF: v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
softfail (~all)
DMARC: v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:MTY1NjE5@ruf.vali.email; fo=1; ri=3600
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R40

from 2025-12-30 to 2027-01-30

Expires in 254 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.for-me-online.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'
strict-transport-security: max-age=31536001