weleda.at

HTML metadata

Title

Weleda® Naturkosmetik & Arzneimittel

Description

Weleda® Naturkosmetik steht für ein einzigartiges Menschen- und Naturverständnis. Unsere Produkte fördern ganzheitliche Schönheit und Gesundheit.

Language

de-AT

Canonical

https://www.weleda.at

Translations

de ×3
fr ×3
en ×2
nl ×2
es
it

Open Graph

url: https://www.weleda.at
title: Weleda® Naturkosmetik & Arzneimittel
site name: Weleda
description: Weleda® Naturkosmetik steht für ein einzigartiges Menschen- und Naturverständnis. Unsere Produkte fördern ganzheitliche Schönheit und Gesundheit.

Technology

CDN: Amazon CloudFront
CMS: Nuxt

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (14)

assets.weleda.com×3
cdn.cookielaw.org×2
www.googletagmanager.com×2
www.weleda.be×2
www.weleda.ch×2
gb.preview.ecom.weleda.com×1
www.google.com×1
www.gstatic.com×1
www.weleda.com×1
www.weleda.de×1
www.weleda.es×1
www.weleda.fr×1
www.weleda.it×1
www.weleda.nl×1

Social

Contact

Address: Hosnedlgasse 27, 1220, Wien, 22. Wiener Bezirk, AT

DNS records live

NS

ns1.brandshelter.com
ns2.brandshelter.de
ns3.brandshelter.info
ns4.brandshelter.net
ns5.brandshelter.us

MX

10 weleda-at.mail.protection.outlook.com

TXT

c343a2fc-f9ee-41f9-8ce8-81f93226e9ad
b9mbj47w1zzpwlfw913tcdwg9xtmtf7s

Verified for

Google
Meta

Email authentication strong

SPF

v=spf1 mx a:remote.weleda.at ip4:31.25.152.39 ip4:91.198.224.0/24 ip4:194.37.255.0/24 ip4:5.79.89.162 ip4:18.153.184.0/27 ip6:2a05:d014:b6d:df06::1000/124  include:_spf.anpdm.com include:spf.protection.outlook.com include:_spf.salesforce.com include:spf.sosafe.de ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQYiwrFIBWDrspuw7TWAvuYj8V97gw2kvQ35XWAoCvBcJgyhrwBIATQLQoz7JLiKxfl0j39IVh8tEb9fkR8E…

selectors probed

Certificate (current)

R13

from 2026-05-04 to 2026-08-02

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.weleda.at/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=('self' https://*.youtube.com), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com https://cdn.mouseflow.com; form-action 'self' https://*.adyen.com https://www.facebook.com; frame-ancestors 'self' https://*.weleda.bloomreach.cloud https://www.weleda.fr; img-src 'self' data: https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg http
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin