hallberg-rassy.com

HTML metadata

Title

Hallberg-Rassy bluewater yachts

Description

Hallberg-Rassy from Sweden build the blue water sailing yachts from 34 to 69 ft that most sailors dream about. Make your dream come true!

Language

en-GB

Generator

TYPO3 CMS

Canonical

https://www.hallberg-rassy.com

Translations

de
en
sv

Technology

Cookie consent

Usercentrics

Third-party hosts loaded (4)

web.eu1.cmp.usercentrics.eu×2
api.usercentrics.eu×1
plugins.flockler.com×1
web.cmp.usercentrics.eu×1

Social

Contact

Phone

+4630454800

Registration

Registrar

Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

Created

1997-03-14

Expires

2027-03-15 284 days left

Updated

2026-03-10

Name servers

logan.ns.cloudflare.com
pola.ns.cloudflare.com

DNS records live

NS

logan.ns.cloudflare.com
pola.ns.cloudflare.com

MX

10 hallbergrassy-com02b.mail.protection.outlook.com

TXT

ms=ms95284249

Email authentication weak

SPF: v=spf1 ip4:62.20.110.106 include:mep.pandasecurity.com include:spf.protection.outlook.com -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-06 to 2026-08-04

Expires in 61 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.hallberg-rassy.com

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=*, camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=*, geolocation=*, gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), unload=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-k16N4-yuMYQa33XBSfzdpi6pIzuMCczlcmKCvgE9dy8aXUOpP213ow' 'strict-dynamic' https://*.facebook.net https://*.licdn.com https://*.usercentrics.eu https://*.cookiebot.eu https://plugins.flockler.com https://*.vimeocdn.com https://*.gstatic.com https://analytics.hallberg-rassy.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.linkedin.com https://*.facebook.com https://*.usercentrics.eu https://*.flockler.com https://flockler.com https://social-proxy.flocklr.com https://*.fbcdn.net https://*.cdninstagram.com https://*.tiktokcdn-eu.com/ https://*.tiktokcdn.com/; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.cookiebot.eu https://media-api.flockler.com/ https://customer-wa9kwmpdbqn89osv.cloudflarestream.com/ https://www.tiktok.com/ https://form.apsis.one https://app.apsis.one https://www.meteoblue.com; style-src-elem 'unsafe-inl
strict-transport-security: max-age=31536000;includeSubdomains