jacobin.de
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
Social
Registration
- Updated
- 2026-01-14
- Name servers
-
- rachel.ns.cloudflare.com.
- randall.ns.cloudflare.com.
DNS records live
- NS
-
- rachel.ns.cloudflare.com
- randall.ns.cloudflare.com
- MX
-
- 10 mx00.ionos.de
- 10 mx01.ionos.de
- TXT
-
google-site-verification=DKr_bLHpMwrTCmNB1jnMrKgV4CluIHDbPeUZmP67wF4v=spf1 a mx include:_spf.perfora.net include:_spf.kundenserver.de ~all
Certificate (current)
WE1
Expires in 26 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
base-uri 'none';child-src 'self' data: blob:;connect-src 'self' ws: wss: localhost:1337 adsapi.jacobin.de api.jacobin.de staging-api.jacobin.de shop.jacobin.de analyse.jacobin.de spenden.twingle.de *.met.vgwort.de;default-src 'self';font-src 'self' data:;form-action 'self';frame-ancestors 'none';frame-src spenden.twingle.de www.youtube.com;img-src 'self' jacobin.de data: *.met.vgwort.de;manifest-src 'self';media-src 'self';object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' localhost:1337 adsapi.jacobin.de api.jacobin.de staging-api.jacobin.de shop.jacobin.de analyse.jacobin.de spenden.twingle.de *.met.vgwort.de www.youtube.com;style-src 'self' 'unsafe-inline';