hm.edu
HTML metadata
Technology
Third-party hosts loaded (4)
- mediapool.hm.edu×20
- assets.hm.edu×4
- cloud.ccm19.de×1
- matomo.hm.edu×1
Social
Contact
- Phone
DNS records live
- NS
-
- dns1.lrz.de
- dns2.lrz.bayern
- dns3.lrz.eu
- MX
-
- 100 hm-edu.mail.protection.outlook.com
- TXT
-
Show 5 TXT records
anny-verification=5726c02e-e9d6-4f73-946a-bfe0eb89cd2dautodesk-domain-verification=a-Wk9s3lMH026f6lguT5protonmail-verification=9c09a24779028f311785dfe722ee6185d2e1dd79dell-technologies-domain-verification=hm.edu_8c4acabc-abe0-4951-8c7a-4f939cfc787b_1703939774mindmanager-verification=d3d4a0629c732ef125c96fe2234b768d878f490894823bfb051690d2ffc9e927
- Verified for
-
- Adobe
- Apple
- Google Workspace
- HARICA
- Microsoft 365
- Zoom
Email authentication partial
- SPF
-
v=spf1 ip4:129.187.244.0/24 ip4:129.187.254.0/23 ip6:2001:4ca0:0:103::/64 mx:hm.edu include:spf.protection.outlook.com include:spf.mailrelay.opencrm.eu include:_spf.zimpel.de redirect=_spf.mail.lrz.deno all qualifier - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SioSxx8ExjRx4l9PmrG4SjBwnMvk5Zswz6U0QGYki3gn1KRc4ZStE86+TJYef1qIjbP4hwOrTrBqj… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAdQRg7vruCIn8R1gaMV7KM/gus2CNhpXsGSLbH5O5xETF4BUFTqcLH8LvgW+T5ChBjvpV1Rh3LQYI…
selectors probed - selector1:
Certificate (current)
GEANT TLS ECC 1
Expires in 181 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
img-src hm.vostok.zone35.net *.b-ite.com *.hm.edu flockler.com fl-1.cdn.flockler.com social-proxy.flocklr.com media-api.flockler.com media.licdn.com cloud.ccm19.de *.cdninstagram.com *.xx.fbcdn.net 'self' data:; font-src *.assisto.beranet.de formulare.hm.edu formulare-test.hm.edu assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu data:; script-src *.assisto.beranet.de *.b-ite.com plugins.flockler.com matomo.hm.edu assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu cloud.ccm19.de 'unsafe-inline'; script-src-elem *.assisto.beranet.de *.b-ite.com plugins.flockler.com matomo.hm.edu formulare.hm.edu formulare-test.hm.edu assets.hm.edu mediapool.hm.edu mediapool-prem.hm.edu cloud.ccm19.de 'unsafe-inline' 'self'; script-src-attr 'unsafe-inline'; connect-src wss://hm.vostok.zone35.net cdn.jsdelivr.net hm.vostok.zone35.net *.beranet.de hm-edu-search-api.e-spirit.cloud *.b-ite.com stats-api.flockler.app api.flockler.app *.hm.edu cloud.ccm19.de matomo.hm.edu; style-src *.assisto.beranet.de *.- strict-transport-security
max-age=31536000
Links to (8)
- facebook.com×1
- instagram.com×1
- inuas.org×1
- linkedin.com×1
- primuss.de×1
- sce.de×1
- uas7.org×1
- youtube.com×1