beethoven.de
HTML metadata
Technology
- Server
- CMS
- Gatsby
Third-party hosts loaded (1)
- lh3.googleusercontent.com×1
Social
Registration
- Updated
- 2015-07-13
- Name servers
-
- dns11.netcologne.de.
- dns12.netcologne.de.
- dns13.netcologne.de.
- dns14.netcologne.de.
DNS records live
- NS
-
- dns11.netcologne.de
- dns12.netcologne.de
- dns13.netcologne.de
- dns14.netcologne.de
- MX
-
- 10 mail.beethoven.de
- TXT
-
google-site-verification=7BGZCaLqR-1Js6F32aWxwQuHZ4YdkSIo7VpCeK7wVHkMS=F004699593CC61D2FAD7BE539B002C5970191B9E
Email authentication weak
- SPF
-
v=spf1 include:spf.mailjet.com mx ip4:194.8.210.188 ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed - mail:
Certificate (current)
WR3
Expires in 36 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
Header values
- referrer-policy
unsafe-url- permissions-policy
autoplay=(self), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), microphone=(), publickey-credentials-get=(), usb=()- x-content-type-options
nosniff- content-security-policy
style-src 'self' https://accounts.google.com/gsi/style 'unsafe-inline' fonts.googleapis.com platform.twitter.com *.twitter.com *.twimg.com *.google.com cdn.jsdelivr.net accounts.google.com panorama.beethoven.de; default-src 'self'; img-src 'self' storage.googleapis.com swiperjs.com www.googleadservices.com *.ggpht.com *.googleusercontent.com *.gstatic.com www.googletagmanager.com *.googleapis.com *.google.com data: *.twitter.com *.twimg.com *.paypal.com *.paypalobjects.com *.ytimg.com accounts.google.com beethoven-viur3.appspot.com *.beethoven.de panorama.beethoven.de; script-src 'self' https://accounts.google.com/gsi/client data: da.beethoven.de ajax.googleapis.com www.google.com www.gstatic.com www.google-analytics.com *.google.com www.googletagmanager.com *.twitter.com cdn.syndication.twimg.com cdn.jsdelivr.net accounts.google.com beethoven.matomo.cloud cdn.matomo.cloud panorama.beethoven.de dante-ai.com chat.dante-ai.com; frame-src 'self' www.google.com drive.google.com accounts.go- strict-transport-security
max-age=22118400- cross-origin-opener-policy
unsafe-none- cross-origin-resource-policy
cross-origin