h2bz-hessen.de
HTML metadata
Technology
Third-party hosts loaded (1)
- img.hessen-agentur.de×10
Contact
Registration
- Updated
- 2024-05-16
- Name servers
-
- root-dns.netcup.net.
- second-dns.netcup.net.
- third-dns.netcup.net.
DNS records live
- NS
-
- root-dns.netcup.net
- second-dns.netcup.net
- third-dns.netcup.net
- MX
-
- 5 email.unet.de
Email authentication weak
- SPF
-
v=spf1 include:spf.mailjet.com mx ip4:213.216.0.0/19 ip4:188.245.188.89 MX ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 68 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hessen-agentur.de blob:; object-src 'self' https://*.hessen-agentur.de; connect-src 'self' 'unsafe-inline' https://nominatim.openstreetmap.org https://*.googleapis.com https://*.twitter.com https://*.twimg.com https://*.hessen-agentur.de; ; media-src 'self' blob: http://*.hessen-agentur.de https://*.hessen-agentur.de ; default-src 'self' * blob:; img-src 'self' * blob: data: https://*.hessen-agentur.de; style-src 'self' https://*.hessen-agentur.de 'unsafe-inline';- strict-transport-security
max-age=31536000