gameduell.de
HTML metadata
Technology
Third-party hosts loaded (1)
- plus.google.com×1
Registration
- Updated
- 2024-07-30
- Name servers
-
- nse10.gameduell.de.
- nse9.gameduell.de.
DNS records live
- NS
-
- nse10.gameduell.de
- nse9.gameduell.de
- MX
-
- 10 mx.noris.de
- 10 mx.noris.net
- 42 fakemx.noris.net
- TXT
-
Show 8 TXT records
apple-domain-verification=NkwZD3RpeHqbXOGAextensis-domain-verification=8f98f655-262d-42e4-af77-5d084513abe653kfrw1r715m89l0h359hlqxnhg4nb1yslack-domain-verification=KLAJipGUWiFtOW2LmcfqzT7WqFRKcCBlmYycvRpuMS=ms95141912atlassian-domain-verification=Dgpg45HGqJxtB1U4gsCsgLKvf8z5ck103oqR7VuMRLUXapI3JuY/n9eOmj1UF8twjamf-site-verification=MXieer3T5UlJUmGck2VYSggoogle-site-verification=ozE8LCguXmC5gzvMZ_9eggsVyW_MZbaQSgXu0QHPuVA
Email authentication weak
- SPF
-
v=spf1 ip4:213.95.135.252 ip4:213.95.75.244 ip4:213.95.169.180 ip4:213.95.74.244 ip4:213.95.73.244 ip4:213.95.72.244 ip4:213.95.71.244 ip4:213.95.2.48 ip4:194.25.88.187 ip4:194.25.88.186 ip4:83.220.152.250 include:spf.protection.outlook.com -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Thawte EV RSA CA G2
Expires in 124 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src https://assets.gameduell.de https://mein.gameduell.de https://my.gameduell.com https://mon.gameduell.fr https://mijn.gameduell.nl https://www.gameduell.de https://www.gameduell.com https://www.gameduell.fr https://www.gameduell.nl https://www.gameduell.co.uk https://www.gameduell.se https://www.gameduell.dk https://www.gameduell.at https://www.gameduell.ca https://www.gameduell.es https://gameduell.de https://gameduell.com https://gameduell.fr https://gameduell.nl https://gameduell.co.uk https://gameduell.se https://gameduell.dk https://gameduell.at https://gameduell.ca https://gameduell.es; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: asset: https://assets.gameduell.de *.google-analytics.com https://webchat.helpshift.com https://seal.digicert.com https://seal-goldengate.bbb.org https://connect.facebook.net https://www.redditstatic.com https://www.dwin1.com https://www.awin1.com https://lantern.roeyecdn.com https://the.sciencebehindecommerce.com https://*.micropaym- strict-transport-security
max-age=63072000; includeSubDomains; preload