osmo.de

HTML metadata

Title

Osmo Holz und Color | Holz trifft Farbe

Language

de

Generator

TYPO3 CMS

Canonical

https://www.osmo.de/

Translations

de-de
en-gb

Technology

Server: Apache

Cookie consent

Cookiebot

Third-party hosts loaded (2)

cdn.eye-able.com×2
consent.cookiebot.com×1

Social

Contact

Phone

+492581922100

Address

Affhüppen Esch 12, 48231 WarendorfPostfach 110161, 48231 Warendorf+49 2581 922-100Schreiben Sie uns

Registration

Updated

2026-04-21

Name servers

dns.dns1.de.
dns.dns2.de.
dns.dns3.de.
dns.dns4.de.

DNS records live

NS

dns.dns1.de
dns.dns2.de
dns.dns3.de
dns.dns4.de

MX

10 mx01.hornetsecurity.com
20 mx02.hornetsecurity.com
30 mx03.hornetsecurity.com
40 mx04.hornetsecurity.com

TXT

Show 9 TXT records

MS=ms54979565
RC5p2ETDpJyojf9HlNSjrIc2v4JPNzyuuRKCVBFQG7n5/dbj/98bxFRuGgHlvCxzhCka2aomDxQZ7PGwm+WvEA==
sophos-domain-verification=b5d9819a7a10f4cf0b238ac5df98f4c97ef96706556a82782a94ecb1d2d5f324
apple-domain-verification=fmxk1r0M2Q4T2HtG
MS=ED57i23F509F0B7292BD8784F1799E82676156A75
autodesk-domain-verification=PNbiwyiNu3LFPQTOhAxh
teamviewer-sso-verification=bcd5242c80da441e92fd02d23bb18ab7
OSMO Holz u. Color GmbH & Co. KG, Warendorf, Germany
google-site-verification=VOs8LUvUPxh07QgMBoDJ-HQ5gPihx8Sc5asXU79wkTk

Email authentication strong

SPF

v=spf1 a include:spf.protection.outlook.com include:spf.hornetsecurity.com ip4:85.214.201.193 ip4:85.22.142.139 ip4:176.9.26.207 -all

strict (-all)

DMARC

v=DMARC1; p=reject; aspf=r

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCw1DcKuicPO4mD1ML6/H+OtRcWpZ0KnVMe5PijmXW6+NA2Rm98jN0fcRzwmrZhWXDtjCjOrsgYRcqYvfJhTX…
mail: v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbk+m0tS2PT/C2C3jSeQwtwmAu4DbPGY4Jpb4398YZ4qjT3aH92aQs/xSVY5fIk8utBp…

selectors probed

Certificate (current)

R12

from 2026-05-07 to 2026-08-05

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.osmo.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self';style-src 'self' 'unsafe-inline' https://cdn.eye-able.com https://fonts.googleapis.com https://fonts.gstatic.com data:; img-src 'self' blob: data: https://www.googletagmanager.com https://viewer.babylonjs.com https://*.googleapis.com https://maps.gstatic.com/ https://imgsct.cookiebot.com data: https://cdn.eye-able.com; object-src 'self' data:; frame-src 'self' mailto: tel: *.youtube.com *.youtube-nocookie.com https://www.google.com https://consentcdn.cookiebot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://cdn.babylonjs.com https://cdn.eye-able.com/ https://*.googleapis.com https://www.google.com https://www.gstatic.com https://consent.cookiebot.com https://consentcdn.cookiebot.com ; connect-src 'self' https://*.google-analytics.com https://consent.cookiebot.com https://viewer.babylonjs.com https://*.googleapis.com https://cdn.eye-able.com https://consentcdn.cookiebot.com; font-src 'self' https://fonts.gstatic.com
strict-transport-security: max-age=31536000; includeSubdomains