rayher.com

.com crawl

First seen 2026-04-17 · Last seen 2026-05-18 · ok HTTP/1.1 200 2881 ms crawled 2026-05-12

DE · 116.202.183.140 · AS24940 Hetzner Online GmbH

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Rayher - Onlineshop für Bastelmaterial, Perlen, Acrylfarbe mit Bastelideen – Rayher
Description: Onlineshop mit vielen Bastelideen. Große Auswahl an Bastelmaterial, Perlen und Acrylfarbe. Produkte für das Basteln mit Kindern
Language: de

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (3)

chimpstatic.com×1
widgets.trustedshops.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Mesh Digital Limited

Created

1998-10-26

Expires

2026-10-25 158 days left

Updated

2025-10-24

Name servers

ns15.domaincontrol.com
ns16.domaincontrol.com

DNS records live

NS

ns15.domaincontrol.com
ns16.domaincontrol.com

MX

100 rayher-com.mail.protection.outlook.com

TXT

MS=ms55297818
MS=ms58618807

Email authentication partial

SPF

v=spf1 mx a include:ispgateway.de include:servers.mcsv.net include:spf.protection.outlook.com include:spf.EU.exclaimer.net include:spf.DE.exclaimer.net ip4:217.7.188.240/29 ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-01-29 to 2027-03-02

Expires in 286 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.rayher.com/de/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy-report-only: font-src *.fontawesome.com static.rayher.com https://static.unzer.com https://applepay.cdn-apple.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com *.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com