bgz-vorort.de
HTML metadata
Technology
- Server
- Apache
Registration
- Updated
- 2021-06-30
- Name servers
-
- ns1-eu.123ns.eu.
- ns2-eu.123ns.de.
- ns3-eu.123ns.eu.
- ns4-eu.123ns.de.
DNS records live
- NS
-
- ns1-eu.123ns.eu
- ns2-eu.123ns.de
- ns3-eu.123ns.eu
- ns4-eu.123ns.de
- MX
-
- 10 mail.bgz-vorort.de
- TXT
-
D-TRUST=SGXO7WVUSA4D2ZE6M8WTMW9v=spf1 mx a:mail.123domain.eu a:smtp1.mail.123domain.eu a:smtp2.mail.123domain.eu -all
Certificate (current)
D-TRUST BR CA 2-23-1 2023
Expires in 153 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak content type protection
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), speaker-selection=()- x-content-type-options
nosniff, nosniff- content-security-policy
script-src 'self' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; style-src-elem 'self' 'unsafe-inline' 'report-sample'; media-src 'self' *.bund.de https://www.youtube.com; upgrade-insecure-requests; style-src 'self' 'report-sample'; form-action 'self'; font-src 'self'; script-src-elem https://www.youtube.com 'self' 'unsafe-inline' 'report-sample'; manifest-src 'self'; connect-src 'self'; frame-ancestors 'self';- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (1)
- bamf.de×1