hwk-kassel.de
HTML metadata
Technology
- Server
- nginx
- CMS
- Drupal
Third-party hosts loaded (2)
- cdn.eye-able.com×2
- werbeportal.handwerk.de×1
Social
Contact
- Phone
Registration
- Updated
- 2021-06-08
- Name servers
-
- ns81.domaincontrol.com.
- ns82.domaincontrol.com.
DNS records live
- NS
-
- ns81.domaincontrol.com
- ns82.domaincontrol.com
- MX
-
- 10 mx1.odav-services.de
- 100 mxlb.ispgateway.de
- 20 mx2.odav-services.de
- 32767 3a8dbfdaed623b16608546c9f62334ea60e701b0.msv1.invalid
- TXT
-
google-site-verification=dZIiDg3mkU5Nv3a0X0ejOQIN66pQNMle_Kbe-dcz6sc
Email authentication weak
- SPF
-
v=spf1 mx include:spf.odav.de include:ispgateway.de ip4:134.119.86.44 ip4:5.35.234.234 ip4:80.237.138.0/24 ip4:92.51.170.64/27 ip4:87.138.164.17 ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Starfield Secure Certificate Authority - G2
Expires in 302 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self';script-src 'self' 'sha256-mm25Js5WV9dyQpIn8zKppEQIY+bqbDjnR7Ga4iFg7vA=' cdn.eye-able.com/public/js/eyeAble.js cdn.eye-able.com/configs/www.hwk-kassel.de.js piwik.hwk-kassel.de/matomo.js 'sha256-95dA/EQceP4Q6wyD5UhmJ7LHxKT+cOqol8Tb1JFM2D0=' 'sha256-pS5/+yCRMHTYbpDpam9/pPJo+ZNxAbPhI5BNfskZjQY=' 'sha256-pS5/+yCRMHTYbpDpam9/pPJo+ZNxAbPhI5BNfskZjQY=';style-src 'self' 'unsafe-inline' cdn.eye-able.com/public/css/ ;img-src 'self' cdn.eye-able.com/public/images/ i.ytimg.com data:;font-src 'self' ;frame-src 'self' https://piwik.hwk-kassel.de www.youtube-nocookie.com www.youtube.com/ werbeportal.handwerk.de;frame-ancestors 'self' ;connect-src 'self' *.eye-able.com piwik.hwk-kassel.de- strict-transport-security
max-age=31536000; preload