besins-healthcare.de
HTML metadata
Technology
- Server
- nginx
- CMS
- Next.js
Third-party hosts loaded (3)
- besins-auaug2cugffkh8b3.z01.azurefd.net×5
- cdnjs.cloudflare.com×1
- cloud.ccm19.de×1
Social
Registration
- Updated
- 2021-08-05
- Name servers
-
- ns2.observatoiredesmarques.fr.
- ns3.nameshield.net.
- obs.ns1.fr.
DNS records live
- NS
-
- ns2.observatoiredesmarques.fr
- ns3.nameshield.net
- obs.ns1.fr
- MX
-
- 10 hermes.besins-healthcare.com
- Verified for
-
- Ahrefs
- Cisco
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 mx ip4:83.142.91.230 include:databay.de include:_smtp.udag.de ip4:37.208.106.14 ip4:37.208.106.15 include:agenturserver.de ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:digital.de@besins-healthcare.com; ruf=mailto:digital.de@besins-healthcare.com; fo=1policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 69 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
deny- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://cloud.ccm19.de/widget/details; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css https://cloud.ccm19.de/app.css; style-src-elem https://undefined https://besins-healthcare.de https://www.besins-healthcare.de https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css 'unsafe-inline' *.azurewebsites.net https://*.besins-healthcare.com https://www.besins-healthcare.com.br/* https://www.besins-healthcare.com.br https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css https://cloud.ccm19.de/app.css 'self'; script-src-elem 'self' 'unsafe-inline' https://cloud.ccm19.de/app.js https://www.googletagmanager.com https://mktdplp102cdn.azureedge.net/public/latest/js/form-loader.js https://player.vimeo.com/api/player.js https://cloud.ccm19.de/plugins/Ccm19ScriptPlaceholder/module.js http://code.etracker.com/code/* http://code.etracker.com/code/e.js http://cod- strict-transport-security
max-age=31104000; includeSubDomains, max-age=63072000; includeSubdomains; preload
Links to (3)
- linkedin.com×2
- xing.com×2
- youtube.com×2