holidu.de

HTML metadata

Title

Holidu - Ferienwohnungen & Ferienhäuser günstig mieten

Description

Riesige Auswahl an hochwertigen Ferienhäusern, Ferienwohnungen, Fincas ✔ Geprüfte Unterkünfte zum besten Preis mit Vertrauen buchen ✔ Ferienhäuser mit Pool, Meerblick, kinderfreundlich, haustierfreundlich ✔ Spezialist für die schönsten Urlaubsregionen Europas ✔

Language

de-DE

Canonical

https://www.holidu.de/

Translations

da-dk
de-at
de-ch
de-de
el-gr
en-au
en-ca
en-gb
en-ie
en-nz
en-us
es-es
es-mx
fr-be
fr-fr
hr-hr
it-it
nb-no
nl-nl
pl-pl
pt-br
pt-pt
sv-se

Open Graph

title: Holidu - Ferienwohnungen & Ferienhäuser günstig mieten
description: Riesige Auswahl an hochwertigen Ferienhäusern, Ferienwohnungen, Fincas ✔ Geprüfte Unterkünfte zum besten Preis mit Vertrauen buchen ✔ Ferienhäuser mit Pool, Meerblick, kinderfreundlich, haustierfreundlich ✔ Spezialist für die schönsten Urlaubsregionen Europas ✔

Technology

CDN: Amazon CloudFront

Analytics

Google Analytics
Google Tag Manager

Ads

Meta Pixel
Taboola

Third-party hosts loaded (30)

static.holidu.com×212
assets.holidu.com×15
img.holidu.com×8
www.googletagmanager.com×2
api.holidu.com×1
bat.bing.com×1
cdn.taboola.com×1
cdnjs.cloudflare.com×1
connect.facebook.net×1
retrack-kupona.kuponacdn.de×1
static2.holidu.com×1
widget.trustpilot.com×1
www.google-analytics.com×1
www.holidu.at×1
www.holidu.be×1
www.holidu.ca×1
www.holidu.ch×1
www.holidu.co.nz×1
www.holidu.co.uk×1
www.holidu.com×1
www.holidu.com.au×1
www.holidu.com.br×1
www.holidu.com.mx×1
www.holidu.dk×1
www.holidu.es×1
www.holidu.fr×1
www.holidu.gr×1
www.holidu.hr×1
www.holidu.ie×1
www.holidu.it×1

Contact

Address: Riesstraße 24, 80992, Munich, DE

Registration

Updated

2026-05-01

Name servers

ns-112.awsdns-14.com.
ns-1475.awsdns-56.org.
ns-1882.awsdns-43.co.uk.
ns-674.awsdns-20.net.

DNS records live

NS

ns-112.awsdns-14.com
ns-1475.awsdns-56.org
ns-1882.awsdns-43.co.uk
ns-674.awsdns-20.net

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

TXT

Show 4 TXT records

facebook-domain-verification=dnhfirx1ovqsb7c93q67ekexu6rxdl
google-site-verification=ALiNEsCi69jS9VSUWSay1nzrd5WFRLcuRGzZ2yIM7lM
google-site-verification=KmO9-B-beJy2dIMNKhXRPn2KrLhiPmLwLLsDhHtYFUA
pinterest-site-verification=6e1f5a586c62432a3f036e60f17fd931

Email authentication strong

SPF

v=spf1 include:_spf.google.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; pct=100; fo=1; ri=3600; rua=mailto:mailreports@holidu.com; ruf=mailto:mailreports@holidu.com

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDULL529zwA/IAmvhfoLJnwmtVRwxhQ1wFhQWa5r/XB0luzbhncgD9a0lHAQJ2QxWWL17NPgLXGMYB1ET4msB…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-23 to 2026-12-23

Expires in 218 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.holidu.de/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:;style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https: http:;font-src 'self' data: https:;connect-src 'self' https: ws: wws:;worker-src 'self' blob:;frame-ancestors 'self' https://*.holidu.com https://*.holidu.cloud https://*.holidu.io https://tsmart.tomas-travel.com
strict-transport-security: max-age=15552000
content-security-policy-report-only: default-src 'self'; script-src 'self' 'nonce-phraYQ7Kpd0en1W49d/Ujg==' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdn.jsdelivr.net https://cdn.chekin.com https://cdnjs.cloudflare.com https://widget.trustpilot.com https://retrack-kupona.kuponacdn.de; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.holidu.com https://*.bookiply.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.sentry.io https://widget.trustpilot.com https://api.trustpilot.com https://cdn.chekin.com; frame-src 'self' https://www.googletagmanager.com https://widget.trustpilot.com https://cdn.chekin.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; manifest-src 'self'; worker-src 'self' blob:; media-src 'self' https:

Links to (1)

trustpilot.com×2