innovationsfoerderung-hessen.de
HTML metadata
Technology
Third-party hosts loaded (2)
- cdn.hessen-agentur.de×13
- img.hessen-agentur.de×13
Registration
- Updated
- 2024-05-16
- Name servers
-
- root-dns.netcup.net.
- second-dns.netcup.net.
- third-dns.netcup.net.
DNS records live
- NS
-
- root-dns.netcup.net
- second-dns.netcup.net
- third-dns.netcup.net
- MX
-
- 10 mail.innovationsfoerderung-hessen.de
- 50 mxe86c.netcup.net
Email authentication partial
- SPF
-
v=spf1 a mx ip4:213.216.0.0/19 ip4:213.216.17.189/32 include:_spf.webhosting.systems ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 62 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hessen-agentur.de blob:; object-src 'self' https://*.hessen-agentur.de; connect-src 'self' 'unsafe-inline' https://nominatim.openstreetmap.org https://*.googleapis.com https://*.twitter.com https://*.twimg.com https://*.hessen-agentur.de; ; media-src 'self' blob: http://*.hessen-agentur.de https://*.hessen-agentur.de ; default-src 'self' * blob:; img-src 'self' * blob: data: https://*.hessen-agentur.de; style-src 'self' https://*.hessen-agentur.de 'unsafe-inline';- strict-transport-security
max-age=31536000