berg-opf.de
HTML metadata
Technology
- Server
- Apache
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (5)
- cdn.digital-castle.de×13
- api.service-digitale-verwaltung.de×2
- cdn-eu.readspeaker.com×1
- chat-app.neurabot.de×1
- use.typekit.net×1
Social
Contact
Registration
- Updated
- 2018-08-11
- Name servers
-
- ns1103.ui-dns.biz.
- ns1103.ui-dns.com.
- ns1103.ui-dns.de.
- ns1103.ui-dns.org.
DNS records live
- NS
-
- ns1103.ui-dns.biz
- ns1103.ui-dns.com
- ns1103.ui-dns.de
- ns1103.ui-dns.org
- MX
-
- 10 mx00.ionos.de
- 10 mx01.ionos.de
- TXT
-
google-site-verification=-HN14clkUerR16qetZCUfiUWHNXKa0BV7H5TXm0baKwgoogle-site-verification=OA9QTex7iYr-u5KRjCzXVVYPJN7EycOVFwczmW0fOME
Email authentication partial
- SPF
-
v=spf1 include:_spf.jpberlin.de include:_spf-eu.ionos.com include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- k1:
v=DKIM1;t=s;p=MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtOq8oGALoA3ai3a+dG7Lgibrzet8WpmOrNi+2QlcvdG5Kv5lm6D7gHnK+FJo5GNSL71VW9bRaYviUO4aqB…
selectors probed - k1:
Certificate (current)
Encryption Everywhere DV TLS CA - G2
Expires in 55 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; base-uri 'self'; default-src 'none'; media-src 'self' https://api.service-digitale-verwaltung.de/; frame-src 'self' https://www.youtube-nocookie.com/ https://player.vimeo.com/ https://www.google.com/ https://www.youtube.com/ https://www.heimat-info.de/ https://www.googletagmanager.com/; style-src 'self' https://cdn-eu.readspeaker.com/ https://cdn.digital-castle.de/ https://use.typekit.net/ https://p.typekit.net/ https://api.service-digitale-verwaltung.de/ https://chat-app.neurabot.de/ 'unsafe-inline'; manifest-src 'self'; img-src 'self' data: https://cdn.digital-castle.de https://i.ytimg.com; connect-src 'self' https://app-eu.readspeaker.com/ https://media-eu.readspeaker.com/ https://rstts-eu.readspeaker.com/ https://cdn-eu.readspeaker.com/ https://vtdnntts-eu.readspeaker.com/ https://www.google-analytics.com/ https://sentry.digital-castle.de/ https://vimeo.com https://api.service-digitale-verwaltung.de/ https://cdn.digital-castle.de/ https://api.neurabot.de/ ht- strict-transport-security
max-age=31536000; includeSubDomains; preload