pistenbully.com

HTML metadata

Title

PistenBully | Pistenraupen & Pistenfahrzeuge

Description

PistenBully ist der führende Anbieter für Pistenraupen & Pistenfahrzeuge | Weltweiter Service | Perfekte Pisten

Language

de

Canonical

https://www.pistenbully.com/

Translations

de
en
en-us
fr
it

Open Graph

url: https://www.pistenbully.com/
title: PistenBully | Pistenraupen & Pistenfahrzeuge
locale: de
site name: PistenBully | Pistenraupen & Pistenfahrzeuge
description: PistenBully ist der führende Anbieter für Pistenraupen & Pistenfahrzeuge | Weltweiter Service | Perfekte Pisten

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (2)

salesviewer.org×1
www.googletagmanager.com×1

Social

Registration

Registrar

united-domains GmbH

Created

2000-11-21

Expires

2026-11-21 186 days left

Updated

2026-03-21

Name servers

ns.udag.de
ns.udag.net
ns.udag.org

DNS records live

NS

ns.udag.de
ns.udag.net
ns.udag.org

MX

10 pistenbully-com.mail.protection.outlook.com

TXT

Show 5 TXT records

teamviewer-sso-verification=0cfb4aaabbf149e096b925e0b5a297cd
sophos-domain-verification=82c3c0e7b66125a3d58163af895c6eab1e2be3db85275e1c2bef4168eb402889
atlassian-domain-verification=edVeBDUuOxiPsz2iEz9wZzjrMGF2ZyDuV8B3oGRkTbnnsF5krjMCXjFMW4My4Z20
MS=FBD519217D1AFA109ED01AD1E81DE95D73319E5A
apple-domain-verification=OJfH4M02B1FBlj0C

Email authentication strong

SPF

v=spf1 a mx ip4:20.229.193.247 include:spf.protection.outlook.com include:spf.crsend.com include:spf.eu.signature365.net -all

strict (-all)

DMARC

v=DMARC1; p=reject;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCciE+1tD7S/dKn/JFA8uZIFpn0cYYbvVzFyE9klbOuJe067HvCQJ9I3CkT5o2Ips3C0nmBB3j0yGb0rP0iKy…

selectors probed

Certificate (current)

E8

from 2026-04-12 to 2026-07-11

Expires in 53 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.pistenbully.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.facebook.com/; img-src 'self' https://*.in82.cortex-media.de https://*.public.in.cortex-media.de https://*.kaessbohrerag.com https://*.powerbully.com https://*.beach-tech.com https://*.pistenbully.com https://*.kcomposites.com https://*.snowsat.com https://*.proacademy.info data: *.usercentrics.eu; frame-src 'self' googlevideo.com *.doubleclick.net *.hcaptcha.com www.youtube-nocookie.com www.youtube.com consentcdn.cookiebot.com consentcdn.cookiebot.eu; default-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' *.in82.cortex-media.de *.public.in.cortex-media.de *.doubleclick.net *.google.com *.articulate.com *.b-ite.com *.cookiehub.net *.cookiehub.eu *.kaessbohrerag.com *.pistenbully.com *.beach-tech.com *.powerbully.com *.snowsat.com *.proacademy.info *.kcomposites.com fonts.googleapis.com fonts.gstatic.com *.googletagmanager.com *.google-analytics.com www.google.com connect.facebook.net www.facebook.com www.google.de www.googleadservices.co
strict-transport-security: max-age=31536000; includeSubDomains