gp-ruesselsheim.de
HTML metadata
Technology
- Server
- Apache
Social
Contact
Registration
- Updated
- 2021-08-04
- Name servers
-
- ns01.versatel.de.
- ns02.versatel.de.
- ns03.versatel.de.
DNS records live
- NS
-
- ns01.versatel.de
- ns02.versatel.de
- ns03.versatel.de
- MX
-
- 10 mx1.hc2456-19.eu.iphmx.com
- 10 mx2.hc2456-19.eu.iphmx.com
- TXT
-
it9pCSL8Ce0ECf9dgpw2fWalMq5m6kMLswisssign-check=99xA_ZIkKPobIkaFL3PZbLt3UKMjvmklm4vfb8t82274k2keuf8hd
- Verified for
-
- Apple
Email authentication weak
- SPF
-
v=spf1 a mx ip4:85.209.60.100 ip4:85.209.60.108 ip4:85.209.60.109 ip4:85.209.60.97 ip4:85.209.60.110 ip4:85.209.60.111 ip4:85.209.60.107 ip4:85.209.60.99 ip4:85.209.60.104 ip4:23.90.105.90 ip4:207.54.76.239 include:agenturserver.de -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 22 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'nonce-ostfpyPSSa2awkryGdw4VgOKudo2L7AbsDjE4tkDwvH2ShpXnEY-KA' data: https://*.openstreetmap.org 'unsafe-inline' https://api.termed.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://termed.de https://www.termed.de https://pro.doctolib.de https://api.termed.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://gp-ruesselsheim.softgarden.io; connect-src 'self' data: https://*.openstreetmap.org https://api.termed.de; font-src 'self' data:; style-src 'self' 'unsafe-inline' https://api.termed.de/%2A https://api.termed.de 'report-sample'; report-uri https://www.gp-ruesselsheim.de/@http-reporting?csp=report&requestTime=1778197408985160&requestHash=452c212b2bf5900f0a50c3ab70b94c4b0d515a78- strict-transport-security
max-age=31536000; includeSubDomains