dbildungscloud.de
HTML metadata
Social
Contact
Registration
- Updated
- 2023-03-01
- Name servers
-
- ns1.open-telekom-cloud.com.
- ns2.open-telekom-cloud.com.
DNS records live
- NS
-
- ns1.open-telekom-cloud.com
- ns2.open-telekom-cloud.com
- MX
-
- 10 mx00.ionos.de
- 20 mx01.ionos.de
- TXT
-
zone-ownership-verification-5fca4a3833929207af0244071cdc03284ab7ab74f486afe8aaf28c65beeb7c88
Email authentication partial
- SPF
-
v=spf1 include:spf.smtp.net include:_spf.perfora.net include:_spf.kundenserver.de ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:devops@dbildungscloud.de; ruf=mailto:devops@dbildungscloud.de; sp=none; aspf=rpolicy: none (monitoring only) · sp=none - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 30 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self' data: blob: https://dbildungscloud.de/login https://dbildungscloud.de wss://dbildungscloud.de https://api.dbildungscloud.de https://embed.dbildungscloud.de https://oauth.dbildungscloud.de https://storage.dbildungscloud.de https://etherpad.dbildungscloud.de https://blog.niedersachsen.cloud https://blog.dbildungscloud.de https://docs.dbildungscloud.de https://sc-content-resources.schul-cloud.org https://sc-content-resources.hpi-schul-cloud.de https://open.hpi.de https://s3.hidrive.strato.com https://scalelite.bbb.messenger.schule https://www10-fms.hpi.uni-potsdam.de https://blog.dbildungscloud.de https://s3.hidrive.strato.com https://cloud-instances.s3.hidrive.strato.com; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data: ; frame-src 'self' https://docs.dbildungscloud.de; frame-ancestors 'self' https://apps.bettermarks.com;- strict-transport-security
max-age=63072000; includeSubDomains; preload