analytical-software.de
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (2)
- web.cmp.usercentrics.eu×2
- px.ads.linkedin.com×1
Social
Contact
- Phone
Registration
- Updated
- 2015-07-24
- Name servers
-
- ns.udag.de.
- ns.udag.net.
- ns.udag.org.
DNS records live
- NS
-
- ns.udag.de
- ns.udag.net
- ns.udag.org
- MX
-
- 5 mx1-eu1.ppe-hosted.com
- 5 mx2-eu1.ppe-hosted.com
- TXT
-
Show 6 TXT records
duo_sso_verification=tMgQiu59WbswgaVe7YWZFhWqMI9elLeY5s2UdRquASff79endLfBs8tnVDSirHrbhmswordpress.azurewebsites.netdocusign=744b1238-cac4-4c26-b1b5-be5fc06ea309google-site-verification=lC28Xj_ggWvJH7L0MIvhHhssmnQS50gZociLbaF3Aiscanva-site-verification=iRaT2CEyMpgiBPyHJcDE9gppe-5337c6360cddad22f94b81fa23237b0f0c003fbc
Email authentication strong
- SPF
-
v=spf1 mx a:dispatch-eu.ppe-hosted.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:admin-c@analytical-software.de; ruf=mailto:admin-c@analytical-software.de; fo=s; aspf=r; adkim=rpolicy: quarantine - DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 40 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), geolocation=(self),midi=(),sync-xhr=(self),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://www.youtube.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://xxxpiwik.analytical-software.de/ https://*.usercentrics.eu/ https://www.googletagmanager.com/ https://*.google-analytics.com/ https://*.google-analytics.com/ https://*.googleapis.com/ https://snap.licdn.com/ https://translate.google.com https://beacon-v2.helpscout.net https://yoast.com; img-src 'self' https://px4.ads.linkedin.com https://www.wpo365.com https://cldup.com/ https://cdn.yotako.io/ https://piwik.analytical-software.de/ https://www.googletagmanager.com/ https://secure.gravatar.com https://s.w.org https://wordpress.org https://ps.w.org https://uct.service.usercentrics.eu https://privacy-proxy-server.usercentrics.eu https://app.usercentrics.eu/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://via.placeholder.com/ https://*.oxy.host/ https://px.ads.linkedin.com/ https://www.google.com/ https://translate.googleapis.com/ https://www.gstatic.com/ https:- strict-transport-security
max-age=63072000; includeSubdomains;