urlaubsguru.de
HTML metadata
Technology
- CDN
- Amazon CloudFront
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (10)
- 9tx2cmvs7s.kameleoon.eu×2
- cdn.jsdelivr.net×1
- graphql.holidayguru.de×1
- holidayoffer.adigi.ai×1
- s.d.adup-tech.com×1
- widget.trustpilot.com×1
- www.googletagmanager.com×1
- www.holidayguru.ch×1
- www.holidayguru.es×1
- www.urlaubsguru.at×1
Social
Contact
- Phone
Registration
- Updated
- 2021-06-22
- Name servers
-
- ns-1110.awsdns-10.org.
- ns-1656.awsdns-15.co.uk.
- ns-402.awsdns-50.com.
- ns-731.awsdns-27.net.
DNS records live
- NS
-
- ns-1110.awsdns-10.org
- ns-1656.awsdns-15.co.uk
- ns-402.awsdns-50.com
- ns-731.awsdns-27.net
- MX
-
- 0 urlaubsguru-de.mail.protection.outlook.com
- TXT
-
site24x7-signals-domain-verification=01642a0345f8fe71fc447d03d0e2cdebamazonses:PPegvjueKCx2VrzkNGx1VntM6prmm1VblM9RnB9sDK0=
- Verified for
-
- Anthropic
- Apple
- Atlassian
- Figma
- Loader.io
- Meta
- OpenAI
Email authentication strong
- SPF
-
v=spf1 mx ip4:84.246.127.35 ip4:91.204.45.102 ip4:152.89.106.13 include:spf.protection.outlook.com include:amazonses.com include:mynewsdesk-de.urlaubsguru.de include:_relay.amadeus.com include:spf.amadeus-leisure-it.com include:_spf.zimpel.de -allstrict (-all) - DMARC
-
v=DMARC1;p=reject;rua=mailto:efc45d8d0c@rua.easydmarc.eu;ruf=mailto:efc45d8d0c@ruf.easydmarc.eu;fo=1;policy: reject (enforced) - DKIM
-
Show 4 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7geB08SU3NIONlfTyuPrVFcps6eBDSHVrihcV2Vk8/1Ge8lMJTUOTMngoe82wVq++V0pCrSdIQ10ZR… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTx6lAK6UfFHfjbUos3XWGYSZi5Qiwb78UQXooPzKZYNWTC2i52t+m7T4VPZFzaoGl2fH3kxumaaK8d9pi… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGzXi3hR4qBzVZulkkRPOTGtJUUWxWTwpcELf/W69di9Z/Ci+bbDw0/tH4bp+jZuC2JJb+tbHupiOfC/n4NtDzjE…
selectors probed - selector1:
Certificate (current)
Amazon RSA 2048 M04
Expires in 161 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' https:; connect-src 'self' https: wss:; frame-src https:; object-src 'none'; frame-ancestors 'self'; form-action 'self'- strict-transport-security
max-age=31536000; includeSubDomains
Links to (8)
- apple.com×2
- facebook.com×2
- google.com×2
- instagram.com×2
- linkedin.com×2
- pinterest.de×2
- tiktok.com×2
- youtube.com×2