dertour.de
HTML metadata
Technology
- Server
- ""
- CMS
- Next.js
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (4)
- eu-images.contentstack.com×62
- d3fwrducsmo9yr.cloudfront.net×35
- api.usercentrics.eu×1
- graphql.usercentrics.eu×1
Social
Registration
- Updated
- 2024-08-23
- Name servers
-
- ns2.xc-ns.de.
- ns5.xc-ns.de.
DNS records live
- NS
-
- ns2.xc-ns.de
- ns5.xc-ns.de
- MX
-
- 10 dertour-de.mail.protection.outlook.com
- TXT
-
Show 4 TXT records
atlassian-domain-verification=9o3lfRLWmJ6i510vRjfIrW3CYxsYfhf7qPGBHYKfOFzM99SQlxBU2BX36CrtEVMESg3aJb7eKm2TKdBz/iozUTZvhoLmayDElchIyFuilE/fkuFzxyiOT1HHBNkh8no84sl47WNaZt4/+k1qrW7dsQ==google-site-verification=wkqYXG10drn_mMB97gHaHNtshR10Ng1y438MYqIRDBAMS=ms51002732
Email authentication strong
- SPF
-
v=spf1 include:spfA.dertour.de include:spf-de.emailsignatures365.com include:mail.zendesk.com include:spf.protection.outlook.com include:spf-001d0c01.pphosted.com include:spf-001d0c03.pphosted.com ip4:194.1.207.198 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; pct=100; rua=mailto:dmarc.reports@dertour.de; ruf=mailto:dmarc.reports@dertour.de; aspf=rpolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAO0zeImCNv/IoyPCmFnNRYqwg0fDFats0z2W8xLt0WNJqYYxmiW2pLbeM4uxJTrqdEEIhVvr3S5oP…
selectors probed - selector1:
Certificate (current)
Amazon RSA 2048 M01
Expires in 168 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
form-action 'self' *.tamgrt.com *.visa.com *.verifiedbyvisa.com *.mastercard.com *.americanexpress.com *.amexsecure.com *.amex.com *.dinersclub.com *.sparkasse.de *.s-id-check.de *.netcetera.com *.six-group.com *.viseca.ch *.cardinalcommerce.com *.modirum.com *.arcot.com *.ca.com *.datatrans.com *.datatrans.ch *.payone.com *.payone.de *.stripe.com *.gpe.cz *.infinitium.com *.thalesgroup.com pci-proxy.com *.bs-card-service.com *.paymenttools.net *.contentful.com; frame-ancestors 'self' dertouristik.experiencecloud.adobe.com experience.adobe.com *.contentstack.com; frame-src 'self' *.usercentrics.eu *.adfarm1.adition.com *.doubleclick.net track.adform.net *.adup-tech.com *.recaptcha.net *.googletagmanager.com *.google.com *.gstatic.com *.googlesyndication.com *.adtrafficquality.google *.zdassets.com *.pinterest.com *.tamgrt.com *.holidaycheck.com *.trivago.com *.demdex.net *.criteo.com static.criteo.net *.azureedge.net *.cloudfront.net my.matterport.com *.yumpu.com *.spotify.com *.youtub- strict-transport-security
max-age=31536000; preload