ihm.de

.de crawl

First seen 2026-04-12 · Last seen 2026-05-17 · ok HTTP/1.1 200 889 ms crawled 2026-05-04

DE · 138.201.1.23 · AS24940 Hetzner Online GmbH

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title

Internationale Handwerksmesse

Description

Die Internationale Handwerksmesse setzt den Fokus auf Bauen, Sanieren und Modernisieren. Entdecken Sie Innovationen aus der Branche und tauschen Sie sich mit Gleichgesinnten aus.

Language

de-DE

Canonical

https://www.ihm.de/

Translations

de-de
en

Technology

Server: nginx

Third-party hosts loaded (2)

consent.cookiefirst.com×1
www.instagram.com×1

Social

Contact

Phone

+4989189149551

Registration

Updated

2019-07-16

Name servers

pri.mordac.de.
sec.mordac.de.

DNS records live

NS

pri.mordac.de
sec.mordac.de

MX

10 dedi2185.your-server.de

TXT

v=spf1 include:spf_smtp1.ghm.de include:spf_momentus.ghm.de include:_spf.eu.messagegears.net -all
d365mktkey=gAxoWjEn44FHzviyL3iN5ehbwPBFlYpQfXaBPuUuR2Yx
MS=ms82395605

Certificate (current)

R12

from 2026-04-29 to 2026-07-28

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.ihm.de/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.adform.net *.adsrvr.org *.adspirit.de *.azureedge.net *.bing.com *.bing.net connect.facebook.net *.clickdimensions.com *.cookiefirst.com *.corussoft.de core.service.elfsight.com ihm.de *.ihm.de *.doubleclick.net *.dynamics.com dynamics.com *.elfsightcdn.com elfsightcdn.com elfsight.com *.elfsight.com *.event-cloud.com *.facebook.com *.facebook.net ghm.de *.ghm.de *.google.com *.google.de *.google.cz *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com id5-sync.com *.instagram.com *.licdn.com *.linkedin.com *.microsoft.com myconvento.com *.myconvento.com *.outbrain.com *.oribi.io *.pinterest.com *.podigee.io *.podigee-cdn.net pollunit.com *.pollunit.com *.vimeo.com *.sascdn.com *.stape.de *.tiktok.com s3-eu-central-1.amazonaws.com s3-eu-west-1.amazonaws.com *.siteground.com *.smartadserver.com *.squarecdn.com squarecdn.com *.taboola.com *.twitter.com *.youtube.com *.youtube-noc