bkk-ewe.de
HTML metadata
Technology
- Server
- Apache
- Cookie consent
-
- Cookiebot
Third-party hosts loaded (3)
- cdn.weglot.com×1
- consent.cookiebot.com×1
- www.bitv-widget.de×1
Contact
- Phone
Registration
- Updated
- 2016-02-24
- Name servers
-
- ans0.ewetel.de.
- ans1.ewetel.net.
- ans2.ewetel.de.
- ans3.ewetel.net.
DNS records live
- NS
-
- ans0.ewetel.de
- ans1.ewetel.net
- ans2.ewetel.de
- ans3.ewetel.net
- MX
-
- 10 mx.itscnet.de
- TXT
-
swisssign-check=0oqqTgmDdGvOWkc6yXePvZk1U9A
Email authentication strong
- SPF
-
v=spf1 mx include:spf.itscnet.de a:pnmss1.itscnet.de a:pnmss.itscnet.de ip4:88.198.166.66 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=none; adkim=r; aspf=spolicy: reject (enforced) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
Encryption Everywhere DV TLS CA - G2
Expires in 178 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak content type protection
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self), camera=(self), microphone=(self), fullscreen=(self), autoplay=(self), accelerometer=(self), gyroscope=(self), magnetometer=(self)- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.dsg1.de https://www.bitv-widget.de/ *.gstatic.com https://connect.facebook.net/ https://load.smart-rechner.de https://stats.bkk-ewe.de/ https://www.weglot.com/ https://cdn.weglot.com/ https://cdn.weglot.com/weglot.min.js https://app-premium.onlim.com/ https://storage-premium.onlim.com/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://hilfsmittel.gwq-serviceplus.de/; style-src 'report-sample' 'self' 'unsafe-inline' *.dsg1.de https://www.bitv-widget.de/ *.gstatic.com https://load.smart-rechner.de/ https://stats.bkk-ewe.de/ https://cdn.weglot.com/ https://app-premium.onlim.com/ https://storage-premium.onlim.com/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://hilfsmittel.gwq-serviceplus.de/; object-src 'none'; base-uri 'self' https://app-premium.onlim.com/ https://storage-premium.onlim.com/; connect-src 'self' *.smart-rechner.de https://connect.facebook.ne- strict-transport-security
max-age=31536000; includeSubdomains