it-nerd24.de
HTML metadata
Technology
- Server
- myracloud
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (12)
- schema.org×6
- it-nerd24.co.uk×2
- www.googletagmanager.com×2
- it-nerd24.at×1
- it-nerd24.ch×1
- it-nerd24.es×1
- it-nerd24.fr×1
- it-nerd24.it×1
- static.zdassets.com×1
- www.google.com×1
- www.paypal.com×1
- www.usemaxserver.de×1
Social
Contact
- Phone
Registration
- Updated
- 2019-06-13
- Name servers
-
- ns1.timmehosting.de.
- ns2.timmehosting.de.
- ns3.timmehosting.de.
DNS records live
- NS
-
- ns1.timmehosting.de
- ns2.timmehosting.de
- ns3.timmehosting.de
- MX
-
- 10 k39t87.meinserver.io
- TXT
-
google-site-verification=H7qe-yE9aZg9VuiIJD-D8uPXV_TrIxNtzkET7E5dJkU202105271004023c6e99pvqitbrd3ib3yr3wm9fttilk013kd7tk60i140wjqtce
Email authentication weak
- SPF
-
v=spf1 a mx include:mail.zendesk.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 83 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; connect-src *; font-src *; object-src * 'unsafe-inline'; media-src * data:; frame-src *; worker-src *; manifest-src *; base-uri *; form-action *; frame-ancestors 'self';- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (19)
- chip.de×1
- ehi-siegel.de×1
- facebook.com×1
- instagram.com×1
- it-nerd24.at×1
- it-nerd24.ch×1
- it-nerd24.co.uk×1
- it-nerd24.es×1
- it-nerd24.fr×1
- it-nerd24.it×1
- m.me×1
- payback.de×1
- provenexpert.com×1
- servicevalue.de×1
- trustedshops.de×1
- twitter.com×1
- wa.me×1
- whatsapp.com×1
- youtube.com×1