handgemachtes-ol.de

.de crawl

First seen 2026-06-03 · Last seen 2026-06-04 · ok HTTP/1.1 200 1113 ms crawled 2026-06-03

FR · 92.205.212.71 · AS21499 Host Europe GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Markt für Handgemachtes & Design Herbst 2026 - Der Kreativmarkt in Oldenburg | Markt für Handgemachtes & Design Herbst
Description: Besuchen Sie den Markt für Handgemachtes & Design am 14. und 15. November 2026 in den Weser-Ems-Hallen Oldenburg. Handmade, Design, DIY, Manufakt…
Language: de
Canonical: https://www.handgemachtes-ol.de/herbst/

Open Graph

title: Markt für Handgemachtes & Design - Herbst 2026
site name: Markt für Handgemachtes & Design - Herbst 2026
description: Besuchen Sie den Markt für Handgemachtes & Design am 14. und 15. November 2026 in den Weser-Ems-Hallen Oldenburg. Handmade, Design, DIY, Manufakt…

Technology

Server: nginx

Fonts

Adobe Fonts

Third-party hosts loaded (1)

use.typekit.net×1

Social

Registration

Updated

2021-05-18

Name servers

ns13.domaincontrol.com.
ns14.domaincontrol.com.

DNS records live

NS

ns13.domaincontrol.com
ns14.domaincontrol.com

MX

100 mxlb.ispgateway.de

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2025-08-19 to 2026-08-31

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.handgemachtes-ol.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=self
x-content-type-options: nosniff
content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:
strict-transport-security: max-age=31536000; includeSubDomains; preload