fondsfinanz.de
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
Third-party hosts loaded (1)
- www.youtube.com×1
Social
Contact
- Phone
Registration
- Updated
- 2024-06-05
- Name servers
-
- nsa4.schlundtech.de.
- nsb4.schlundtech.de.
- nsc4.schlundtech.de.
- nsd4.schlundtech.de.
DNS records live
- NS
-
- nsa4.schlundtech.de
- nsb4.schlundtech.de
- nsc4.schlundtech.de
- nsd4.schlundtech.de
- MX
-
- 10 mx1.hc876-75.eu.iphmx.com
- 10 mx2.hc876-75.eu.iphmx.com
- TXT
-
Show 11 TXT records
3vfQKGT0WyB+V1nyJ9BqRV5t2j7ztJd7nb9YvgXscPY=ciscocidomainverification=67d0edc54dcd227ee67e83e864127bfdb55c917794214061fbbe47c48f914df9spf2.0/pra_zjovetkft2us89mx2as9jn8j8bkzkhhswisssign-check=BBhGbtORlV52366o3GLyVxdccK0lwxr34ykc212qxzqmbbqx208zbjk0h4k00D58000000HVVP=1TBVi0000000D0T;00D58000000HVVP=1TBVi0000000D0U;00D58000000HVVP=1TBVi0000000D0V;00D58000000HVVP=1TBVi0000000D0W;00D58000000HVVP=1TBVi0000000D0X;00D58000000HVVP=1TBVi0000000FWv;00D58000000HVVP=1TBVi0000000FYX;00D9b00000Hjpvp=1TB9b0000000BZl;00D9b00000Hjpvp=1TB9b0000000BZmcrrmtmcd15721421ppk72xvcx0yfltwkswisssign-check=erWSocLSAscaFcENxG3ZbSk3UJI11245305B7BMJzth16t7ykps1w678fndtrlr6c1fny3gy
- Verified for
-
- Apple
- Atlassian
- Cisco
- GlobalSign
- Microsoft 365
- OneTrust
Email authentication strong
- SPF
-
v=spf1 a mx ip4:63.241.210.93 ip4:63.241.251.43 ip4:195.145.112.226 ip4:89.200.169.12 ip4:213.155.77.149 ip4:194.97.156.218 ip4:194.97.157.151 ip4:49.12.38.57 ip4:167.235.196.147 ip4:49.12.188.86 ip4:212.18.211.197 ip4:217.7.116.79 ip4:20.218.198.180 ip4:20.113.121.142 include:spf.u2d.de include:spf.smtp.net include:_spf.zimpel.de ip4:109.234.127.0/24 ip4:185.98.184.0/24 ip4:89.202.70.4 ip4:89.202.70.16 ip4:89.202.70.23 ip4:89.202.70.17 ip4:80.82.206.0/26 exists:%{i}.spf.hc876-75.eu.iphmx.com include:_spf.salesforce.com include:spf.protection.outlook.com include:spf-de.emailsignatures365.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:lylunzin@ag.c2.dmarcian.com; ruf=mailto:lylunzin@fr.c2.dmarcian.com; fo=1;policy: reject (enforced) - DKIM
-
- mail:
v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfqjiKCdBU2x9IhmXFK7aL0Z89rAAtQbZaaFT4S3uhmJo4WaZd5cPU1Rd2SD/uqXI14fORJw7z03ksSuymfKd4ZOvmo…
selectors probed - mail:
Certificate (current)
Thawte TLS RSA CA G1
Expires in 277 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMORIGIN- x-content-type-options
nosniff- content-security-policy
default-src * data: 'unsafe-eval' 'unsafe-inline' blob: ;frame-src 'self' *;frame-ancestors 'self' *; worker-src 'self' * blob:;- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (7)
- linkedin.com×3
- facebook.com×3
- instagram.com×3
- youtube.com×3
- twitter.com×3
- xing.com×3
- mmm-messe.de×1