casino-baden-baden.de
HTML metadata
Technology
- Server
- Apache
Third-party hosts loaded (1)
- code.etracker.com×1
Social
Contact
Registration
- Updated
- 2020-03-11
- Name servers
-
- ns01.agenturserver.co.
- ns01.agenturserver.de.
- ns01.agenturserver.it.
DNS records live
- NS
-
- ns01.agenturserver.co
- ns01.agenturserver.de
- ns01.agenturserver.it
- MX
-
- 10 de-smtp-inbound-1.mimecast.com
- 10 de-smtp-inbound-2.mimecast.com
- TXT
-
swisssign-check=1xHXofFjRXbqBFQek7bnAMN1sx0
- Verified for
-
- 1Password
- Atlassian
Email authentication strong
- SPF
-
v=spf1 ip4:213.61.92.64/27 ip4:213.61.168.176/29 include:secureserver.net include:de._netblocks.mimecast.com include:spf.smtp.net -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:74ecc3493b81014@rep.dmarcanalyzer.com; ruf=mailto:74ecc3493b81014@for.dmarcanalyzer.com; fo=1;policy: reject (enforced) - DKIM
-
- default:
v=DKIM1; k=rsa; s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11T+uRnUef86kQ2MB5Wj7a61EZkpxThs+KWAbm5VmtBNB6Sp3vVcxhU0bz9zp0+FCzwoKx…
selectors probed - default:
Certificate (current)
R13
Expires in 80 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), usb=()- x-content-type-options
nosniff- content-security-policy
script-src 'nonce-RMf4NYpRdVL3zo2u2QO4Eg==' 'strict-dynamic'; worker-src * blob:; connect-src *; img-src * data: blob:; style-src * 'unsafe-inline'; font-src * data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.etracker.com, default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors *; script-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; worker-src blob:; child-src * 'self' blob:;- strict-transport-security
max-age=31536000; includeSubDomains; preload