bildungswerk-herne.de
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- consent.amedick-sommer.de×1
- www.googletagmanager.com×1
Registration
- Updated
- 2023-02-07
- Name servers
-
- cns1.cloudpit.de.
- cns2.cloudpit.com.
- cns3.cloudpit.io.
DNS records live
- NS
-
- cns1.cloudpit.de
- cns2.cloudpit.com
- cns3.cloudpit.io
- MX
-
- 10 mx03.secure-mailgate.com
- 10 mx04.secure-mailgate.com
Email authentication weak
- SPF
-
v=spf1 a mx include:secure-mailgate.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 30 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin, origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
default-src * blob: data: www.youtube.com s.ytimg.com *.usercentrics.eu *.google.com *.googletagmanager.com *.google-analytics.com *.amedick-sommer.de elisabethgruppe.concludis.de *.zoom.us zoom.us wss://*.zoom.us consent.amedick-sommer.de; style-src 'self' 'unsafe-inline' elisabethgruppe.concludis.de consent.amedick-sommer.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: www.youtube.com s.ytimg.com *.usercentrics.eu *.google.com *.googletagmanager.com *.google-analytics.com *.amedick-sommer.de *.stage.bio elisabethgruppe.concludis.de *.zoom.us zoom.us consent.amedick-sommer.de api.termed.de; img-src * data: blob: consent.amedick-sommer.de; object-src 'none'; frame-ancestors 'self' patientenportal.elisabethgruppe.de; frame-src *; font-src 'self' data: elisabethgruppe.concludis.de;- strict-transport-security
max-age=31536000; includeSubDomains; preload