healthcapital.de
HTML metadata
Technology
- Server
- Apache
Third-party hosts loaded (1)
- curaconsent.curacon.de×1
Social
Registration
- Updated
- 2026-02-17
- Name servers
-
- ns.shc-service.com.
- ns.shc-service.eu.
- ns.shc-service.it.
- ns.shc-service.net.
DNS records live
- NS
-
- ns.shc-service.com
- ns.shc-service.eu
- ns.shc-service.it
- ns.shc-service.net
- MX
-
- 10 mx26.shc.eu
Email authentication weak
- SPF
-
v=spf1 a mx ip4:185.79.46.91/32 ip4:109.71.26.226/32 ip4:185.79.45.107/32 ip6:2a01:440:1:3:20c:29ff:fe24:226/128 -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 66 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- permissions-policy
fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
default-src *; img-src * 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://piwik.shc.eu/piwik.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://foerdernews-bb.de/fn.js https://foerdernews-bb.de/fnbb.js https://consent.comply-app.com/ https://privacy-policy-sync.comply-app.com/js/app.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://piwik.shc.eu/matomo.js https://curaconsent.curacon.de https://decareto.b-cdn.net 2; style-src 'self' 'unsafe-inline' https://foerdernews-bb.de/css/channel8.css https://curaconsent.curacon.de;worker-src blob: *; font-src 'self' 'unsafe-inline' data:- strict-transport-security
max-age=31536000