4-klang.de
HTML metadata
Technology
- Server
- nginx
Registration
- Updated
- 2026-02-25
- Name servers
-
- ns5.speed-server.de.
- ns6.speed-server.de.
- ns7.speed-server.de.
- ns8.speed-server.de.
DNS records live
- NS
-
- ns5.speed-server.de
- ns6.speed-server.de
- ns7.speed-server.de
- ns8.speed-server.de
- MX
-
- 10 proxy.carra-mail.de
- 100 proxy2.carra-mail.de
- Verified for
-
Email authentication strong
- SPF
-
v=spf1 +a +mx +ip4:80.190.194.0/24 +ip4:80.190.174.0/24 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=none; adkim=r; aspf=r; rua=mailto:dkim@carra.de; ruf=mailto:dkim@carra.de; fo=1policy: none (monitoring only) · sp=none - DKIM
-
- dkim:
v=DKIM1; k=rsa-sha256; n=2048; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvfibo0K8Kh8kK5bt27LdTnEJoj0V8tSx1mULYFycle5QL8F/H46fFcHVor3TYg…
selectors probed - dkim:
Certificate (current)
R12
Expires in 20 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
picture-in-picture=(self), autoplay=(self), display-capture=(self), fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; form-action 'self'; frame-ancestors 'self'; style-src 'self' 'unsafe-inline'; script-src-attr 'self';