urlaubspiraten.at

HTML metadata

Title: Urlaubspiraten | Reiseschnäppchen, Hotelgutscheine, Flüge
Description: Wir finden für euch die besten Reisen, günstigsten Flüge, und Gutscheine um in Hotels und auf Reisen richtig zu sparen. Tipps & Tricks sind inklusive!
Language: de
Canonical: https://www.urlaubspiraten.at/

Open Graph

url: https://www.urlaubspiraten.at
title: Urlaubspiraten | Reiseschnäppchen, Hotelgutscheine, Flüge
locale: de_AT
site name: Urlaubspiraten
description: Wir finden für euch die besten Reisen, günstigsten Flüge, und Gutscheine um in Hotels und auf Reisen richtig zu sparen. Tipps & Tricks sind inklusive!

Technology

CDN: Cloudflare

Third-party hosts loaded (3)

media.holidaypirates.group×47
image.urlaubspiraten.de×34
images.ctfassets.net×5

Social

DNS records live

NS

bill.ns.cloudflare.com
elaine.ns.cloudflare.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

Verified for

Google
Meta

Email authentication strong

SPF

v=spf1 a mx ip4:82.165.115.184 ip4:144.76.44.2 ip4:144.76.44.4 ip4:148.251.15.8 ip4:144.76.44.3 ip4:148.251.252.124 ip4:148.251.252.125 ip4:148.251.252.126 ip4:144.76.44.20 ip4:144.76.44.15 ip4:84.246.127.3 ip4:144.76.44.2 ip4:144.76.134.8/29 include:spf.mandrillapp.com include:_spf.google.com include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarcreports@urlaubspiraten.at; pct=100; aspf=r; adkim=r;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn7WgPmnRI+7OfZXOiMnAYP3zTIMpjLVewbqChqDcj0WNbxZT/hQTHxN9yMYLGJCPps/l3li6GRyXv…

selectors probed

Certificate (current)

WE1

from 2026-04-24 to 2026-07-23

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.urlaubspiraten.at/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;script-src * 'unsafe-eval' 'unsafe-inline';script-src-attr 'unsafe-inline';style-src * 'unsafe-inline';img-src * data:;font-src *;connect-src * ;manifest-src data:;frame-ancestors 'self';form-action *;base-uri 'self';object-src 'none'
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin