ford-peschek-oeynhausen.at
HTML metadata
Technology
- Server
- nginx
Third-party hosts loaded (2)
- cdn.frat-dws.at×47
- frat-rdsrv.mehrkanal.com×11
Contact
- Phone
DNS records live
- NS
-
- ns1.mehrkanal.com
- ns2.mehrkanal.com
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 59 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self), microphone=(), camera=()- x-content-type-options
nosniff- content-security-policy
default-src 'none'; object-src 'self'; base-uri 'self'; frame-ancestors 'self' *.mk-dev-test.com *.mk-stage.com *.mehrkanal.net *.mehrkanal.com *.testmk2.com; script-src 'self' *.googleapis.com maps.google.de *.gstatic.com *.google-analytics.com *.googletagmanager.com www.youtube.com www.google.com/recaptcha/api.js www.googleadservices.com s.ytimg.com test-rdsrv-frat.mehrkanal.com rdsrv-frat.mehrkanal.com cdn.frat-dws-frontend.testmk2.com mk-dws-matomo-test.mehrkanal.com dev-piwik.mehrkanal.com display.ugc.bazaarvoice.com apps.nexus.bazaarvoice.com api.bazaarvoice.com frat-dws-test-piwik.mehrkanal.com analytics-static.ugc.bazaarvoice.com js.adsrvr.org zubehoer-navigator.de hpm-test.itt-dev.de secure.adnxs.com 'unsafe-inline' 'unsafe-eval' cdn.frat-dws-frontend.testmk2.com cdn.frat-dws.at frat-dws-matomo.mehrkanal.com hpm.servicelister.de; frame-src 'self' consentcdn.cookiebot.com www.youtube-nocookie.com *.mehrkanal.com *.mk-dev-test.com *.- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (2)
- google.com×1
- ford.at×1