huenfeld.de
HTML metadata
Technology
- Server
- Apache
Third-party hosts loaded (2)
- heyzine.com×1
- www.zuse-museum-huenfeld.de×1
Social
Contact
- Phone
- Address
- Magistrat der Stadt HünfeldKonrad-Adenauer-Platz 136088Hünfeld
Registration
- Updated
- 2019-02-05
- Name servers
-
- dns10.nethinks.com.
- dns9.nethinks.com.
DNS records live
- NS
-
- dns10.nethinks.com
- dns9.nethinks.com
- MX
-
- 10 fmail.stadtwerke-huenfeld.de
- 15 mx1.huenfeld.de
- TXT
-
MS=ms15749917
Email authentication weak
- SPF
-
v=spf1 ip4:212.218.193.6 ip4:212.218.193.65 include:ekom21.de +a +mx +include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZi3K4qIerTMSieXSsYS32rzHkUrjS2JOkXp1r9z8hRBH3/rpiOxuyas+pbj+KDVl8AQjyfFarfaA7… - s1:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVS4qvlbcQItROO5lBDevsFMbIzeDmDHqUTxU4+VqzrlSwqzWHXfAMOEojrPSfcBo1IcFNHXSGMMcOr4yYIIKPywtv6Op+…
selectors probed - default:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 169 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; child-src 'self' blob: https://heyzine.com https://kb.ionas.de/; connect-src 'self' https: https://*.egovernor.de/ https://huenfeld.de https://pretix.eu/ https://www.huenfeld.de https://www.huenfeld.de/:sa2-bwc/de/ https://www.huenfeld.de/:sa2-search/de/; font-src 'self' data:; frame-ancestors 'self' https://36o.de https://www.erfinder-konrad.de https://www.huenfeld.de https://www.huenfeld360.de/; frame-src 'self' https: https://heyzine.com https://huenfeld.de https://iam.chamaeleon.de/ https://pretix.eu/ https://www.erfinder-konrad.de https://www.huenfeld.de https://www.huenfeld360.de/ https://www.museum-modern.art https://www.zuse-museum-huenfeld.de; form-action 'self'; img-src 'self' data: https://*.egovernor.de/ https://tiles.chamaeleon.de https://www.huenfeld.de https://www.huenfeld.de/ https://www.zuse-museum-huenfeld.de; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://huenfeld.de https:/- strict-transport-security
max-age=31536000
Links to (25)
- instagram.com×2
- konrad-zuse-schule.de×2
- openstreetmap.org×2
- partnerschaftsverein-huenfeld.de×2
- pretix.eu×2
- region-fulda.de×2
- rhoen.info×2
- sicher-melden.de×2
- stadtwerke-huenfeld.de×2
- termine-reservieren.de×2
- webkita.de×2
- youtube.com×2
- zuse-museum-huenfeld.de×2
- zuseworks.de×2
- aha-likoer.de×2
- apple.com×2
- city-marketing-huenfeld.de×2
- drk-huenfeld.de×2
- erfinder-konrad.de×2
- facebook.com×2
- google.com×2
- hessen.de×2
- hessischeskegelspiel.de×2
- huenfeldcard.de×2
- infopin-huenfeld.de×2