sprudelhoftherme.de

.de crawl

First seen 2026-04-28 · Last seen 2026-05-18 · ok HTTP/1.1 200 3507 ms crawled 2026-05-05

DE · 134.119.247.59 · AS34011 Host Europe GmbH

Reputation 100/100

Classifying

HTML metadata

Title

Home - Sprudelhof Therme Bad Nauheim

Description

Erleben Sie Wohlfühlmomente in der Sprudelhof Therme Bad Nauheim – entspannende Solebecken, exklusive Wellness-Angebote und kulinarische Genüsse warten auf Sie!

Language

Generator

WordPress 6.9.4

Canonical

https://sprudelhoftherme.de/

Feeds

Open Graph

url: https://sprudelhoftherme.de/
title: Home - Sprudelhof Therme Bad Nauheim
locale: de_DE
site name: Sprudelhof Therme Bad Nauheim
description: Erleben Sie Wohlfühlmomente in der Sprudelhof Therme Bad Nauheim – entspannende Solebecken, exklusive Wellness-Angebote und kulinarische Genüsse warten auf Sie!
updated time: 2026-05-01T07:38:47+02:00

Technology

Server: nginx
CMS: WordPress

Third-party hosts loaded (2)

cdn.eye-able.com×2
gmpg.org×1

Social

Contact

Email

info@sprudelhoftherme.de

Phone

+49 6032 99 100 0

Address

Ludwigstraße 40, 61231, Bad Nauheim, Hessen, Deutschland

Registration

Updated

2024-06-21

Name servers

ns33.domaincontrol.com.
ns34.domaincontrol.com.

DNS records live

NS

ns33.domaincontrol.com
ns34.domaincontrol.com

MX

0 sprudelhoftherme-de.mail.protection.outlook.com

TXT

v=spf1 mx include:spf.protection.outlook.com a ip4:212.27.79.46 -all

Verified for

Brevo
Microsoft 365

Certificate (current)

Starfield Secure Certificate Authority - G2

from 2025-05-13 to 2026-05-15

Expired 6 days ago

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://sprudelhoftherme.de/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=*, execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=*, geolocation=*, gyroscope=(), interest-cohort=(), layout-animations=(), legacy-image-formats=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), oversized-images=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-script=(), sync-xhr=(), usb=(), vertical-scroll=(), web-share=(), wake-lock=(), xr-spatial-tracking=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload