aerzte-finanz.de
HTML metadata
Technology
- Server
- Apache
Third-party hosts loaded (1)
- cdn.trustcommander.net×1
Social
Contact
Registration
- Updated
- 2018-02-22
- Name servers
-
- ns1.markmonitor.com.
- ns2.markmonitor.com.
- ns3.markmonitor.com.
- ns4.markmonitor.com.
- ns5.markmonitor.com.
- ns6.markmonitor.com.
- ns7.markmonitor.com.
DNS records live
- NS
-
- ns1.markmonitor.com
- ns3.markmonitor.com
- ns4.markmonitor.com
- ns5.markmonitor.com
- ns6.markmonitor.com
- MX
-
- 10 mxa-00181c02.gslb.pphosted.com
- 10 mxb-00181c02.gslb.pphosted.com
- TXT
-
Show 4 TXT records
rhgw3dy21yy4f466jl3rtbgbtg7ttc20swisssign-check=GNcJs3xU1_CmMI_QhQyOn9Ph0Vcswisssign-check=w6fHWz0BRb0-BzLkkHxYa1RzDCgFakyb1bMChIFJaXrN7Zdb8asFkZbp7aRP8p6mKoGzSW79OBj0EOsQk6Iqx3PEeXsl2kZ/QC1OScyvNCb9ppjwg==
- Verified for
-
- Adobe
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:spf.dafag3.4hr.de include:spf-00181c02.pphosted.com a:mail01.axa.de ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; fo=1; pct=100; rua=mailto:dmarc.report@axa.com; ruf=mailto:dmarc.failure@axa.compolicy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 234 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
frame-src https://tilgung.fmh.de https://eigenheim.fmh.de https://tilgungsrechner.fmh.de https://www.axa-video.de https://www.aerzte-finanz.de https://*.fls.doubleclick.net https://optimize.google.com https://cdn.tagcommander.com https://cdn.trustcommander.net https://www.dwin1.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com 'self'; base-uri 'self'; object-src 'self'; script-src https://cdn.tagcommander.com https://cdn.trustcommander.net https://www.dwin1.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://cdn.krxd.net https://bat.bing.com https://*.doubleclick.net https://www.google.com https://cdn.ampproject.org https://platform.commandersact.com https://optimize.google.com https://connect.facebook.net https://www.facebook.com 'self' 'unsafe-inline' 'unsafe-eval', frame-ancestors https://*.pironet-ndh.com:4433 'self'- strict-transport-security
max-age=31536000; includeSubDomains; preload