dgnb-navigator.de
HTML metadata
Technology
- Server
- nginx
Contact
- Phone
Registration
- Updated
- 2020-05-20
- Name servers
-
- ns1.webix.de.
- ns3.webix.de.
DNS records live
- NS
-
- ns4.webix.de
- ns5.webix.de
- MX
-
- 10 dgnbnavigator-de01b.mail.protection.outlook.com
- TXT
-
MS=ms56518980
Email authentication weak
- SPF
-
v=spf1 include:spf.protection.outlook.com -include:_spf.webix.de allpermissive (+all) — anyone can send as this domain - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Sectigo RSA Domain Validation Secure Server CA
Expires in 34 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=*, autoplay=(self), camera=(), display-capture=(self), encrypted-media=(self), fullscreen=*, gamepad=(), geolocation=(), gyroscope=*, hid=(), identity-credentials-get=(self), idle-detection=(self), local-fonts=*, magnetometer=*, microphone=(), midi=(), otp-credentials=(), payment=*, picture-in-picture=*, screen-wake-lock=(), serial=(), storage-access=*, usb=(), web-share=*, window-management=(self), xr-spatial-tracking=(self)- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; default-src 'self' *.mosaiq.com *.youtube-nocookie.com *.youtube.com *.analytics.google.com *.google-analytics.com google-analytics.com stats.g.doubleclick.net; font-src 'self' *.gstatic.com data:; img-src 'self' *.mosaiq.com *.dgnb-navigator.de i.ytimg.com yt3.ggpht.com data: *.youtube-nocookie.com *.googleapis.com *.google.com *.google.de *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.googleadservices.com googleadservices.com *.gstatic.com *.ads.linkedin.com *.facebook.com; script-src 'self' *.mosaiq.com *.youtube-nocookie.com *.googleapis.com *.google.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.googleadservices.com googleadservices.com 'unsafe-inline' 'unsafe-eval'; worker-src *; script-src-elem * 'unsafe-inline' blob:; connect-src 'self' maps.googleapis.com *.google-analytics.com google-analytics.com *.google.com *.googleadservices.com googleadservices.com *.ads.linkedin.co- strict-transport-security
max-age=31536000; includeSubdomains; always
Links to (50)
- basf.com×2
- betomax.de×2
- binne.de×2
- blumartin.de×2
- brohlburg.com×2
- btf-innovationen.de×2
- condor-group.eu×2
- conica.com×2
- contec-de.com×2
- deflex.de×2
- dgnb-akademie.de×2
- dgnb-system.de×2
- dgnb.de×2
- dicht-system.de×2
- durach.com×2
- duracryl.com×2
- eas-tb.de×2
- elapro.de×2
- emco-bau.de×2
- fural.com×2
- garant.de×2
- getzner.com×2
- geze.com×2
- gorterdeutschland.de×2
- gutex.de×2
- hanno.com×2
- hansa.com×2
- hasse.info×2
- helopal.com×2
- hilbra.de×2
- hohlkehlen.com×2
- holcim.de×2
- huebner-lee.de×2
- hutzel-hydrokulturen.de×2
- ibs-novocrete.de×2
- iso-chemie.de×2
- isopandeutschland.de×2
- istraw.de×2
- jab.de×2
- kampmann.de×2
- kebony.com×2
- kemper-system.com×2
- kermi.de×2
- kim-tec.de×2
- baumit.de×2
- knopp-chemie.de×2
- kueffner.de×2
- lindab.de×2
- lunawood.com×2
- malekigmbh.com×2