langlauf-oberhof.de

.de crawl

First seen 2026-04-26 · Last seen 2026-05-19 · ok HTTP/1.1 200 957 ms crawled 2026-05-19

DE · 116.202.183.56 · AS24940 Hetzner Online GmbH

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Langlauf & Nordische Kombination Weltcup Oberhof

Description

Alles rund um das Programm, die Tickets, Angebote und Specials zum Langlauf & Nordische Kombination Weltcup Oberhof erfahren. Hier klicken und informieren!

Language

de-DE

Generator

TYPO3 CMS

Canonical

https://www.langlauf-oberhof.de/

Translations

Open Graph

title: Langlauf & Nordische Kombination Weltcup Oberhof
description: Alles rund um das Programm, die Tickets, Angebote und Specials zum Langlauf Weltcup und Nordische Kombination Oberhof erfahren. Hier klicken und informieren!

Technology

Server: BunnyCDN-DE1-1076

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.biathlon-oberhof.de×9
www.googletagmanager.com×1
www.langlauf-oberhof.com×1

Social

Contact

Email

Phone

+493684253330

Address

KontaktTelefon:+49 36842 53330E-Mail:info@weltcup-oberhof.de

Registration

Updated

2024-05-16

Name servers

ns75.domaincontrol.com.
ns76.domaincontrol.com.

DNS records live

NS

ns75.domaincontrol.com
ns76.domaincontrol.com

MX

100 mxlb.ispgateway.de

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

from 2026-03-27 to 2026-06-25

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.langlauf-oberhof.de/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
missing frame protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(), midi=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'
strict-transport-security: max-age=31536000