stihl-timbersports.com

HTML metadata

Title: The home of the STIHL TIMBERSPORTS® Series.
Description: STIHL TIMBERSPORTS® is an international extreme sports competition series in wood chopping, lumberjack and logger sports.
Language: en
Canonical: https://www.stihl-timbersports.com/en

Open Graph

url: https://www.stihl-timbersports.com/en
title: The home of the STIHL TIMBERSPORTS® Series.
description: STIHL TIMBERSPORTS® is an international extreme sports competition series in wood chopping, lumberjack and logger sports.

Technology

CDN: Amazon CloudFront
Server: Apache

Third-party hosts loaded (2)

252092-stihl-ts.adobeioruntime.net×1
rum.hlx.page×1

Social

DNS records live

NS

ns1.plusserver.com
ns2.plusserver.com
ns3.plusserver.com

MX

10 stihltimbersports-com01c.mail.protection.outlook.com

TXT

rovag_verification_token=98088D161C144399BE78454FAF0775B3

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.mailjet.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:wqjlqdbv@ag.eu.dmarcadvisor.com; ruf=mailto:wqjlqdbv@fr.eu.dmarcadvisor.com; ri=86400;

policy: reject (enforced) · sp=reject

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbX2ZTwQuvbwCRM1sPDNGnGUtVglnBezj6NnYnF18nSmGbnXFTq7OBIplzTCHXWgYY43wdD14LJrlZhlU2Oa…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIpxDbczyhK6FzlHu4VWH+pJ+zX4bMdr8sMqTGRZ36zGgYdAJRx8cgTY1M2dKU4Lnj9h91hpQ5teE7blgDUb…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswwerRZaAAg0bF5GDHE+yCStzlLyO/uEHID05BLPV70GCRjZ9EGfvESxYQlicgyMlWbmgfKPPw9ualqPze…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1GRqKPXJ215Ha0XjZD6bafMM0IP5LCdFXZ3p5Bgoz2rJAxBIQ963gHSf/ykiZMHnhcAdPjFh1sLf0laIxR2C7N6…

selectors probed

Certificate (current)

Entrust OV TLS Issuing RSA CA 2

from 2025-11-25 to 2026-11-26

Expires in 189 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.stihl-timbersports.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com *.adform.net *.adnxs.com assets.adotmob.com *.adsrvr.org *.ads-twitter.com pixel.adsafeprotected.com *.adyen.com zenloop-website-overlay-production.s3.amazonaws.com *.amazon-adsystem.com *.awin1.com impact.axite.app oc-cdn-public-eur.azureedge.net web-app-costcalculator-frontend-pda-t.azurewebsites.net web-app-costcalculator-frontend-pda-q.azurewebsites.net web-app-costcalculator-frontend-pda-r.azurewebsites.net web-app-batteryadvisor-frontend-pda-t.azurewebsites.net web-app-batteryadvisor-frontend-pda-q.azurewebsites.net web-app-batteryadvisor-frontend-pda-r.azurewebsites.net *.b2x-env.cloud apps.bazaarvoice.com *.bing.com *.bing.net *.clarity.ms *.cloudflare.com app.contentsquare.com t.contentsquare.net *.cookielaw.org *.criteo.com *.criteo.net digitizer.app *.dwin1.com *.g.doubleclick.net edge.curalate.com *.en25.com *.excentos.com nonce-csp-test *.facebook.net *.foxbase.de *.f
strict-transport-security: max-age=31536000; includeSubdomains;