josephstift-dresden.de

.de crawl

First seen 2026-04-29 · Last seen 2026-05-19 · ok HTTP/1.1 200 3153 ms crawled 2026-05-07

US · 18.165.140.8 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Krankenhaus St. Joseph Stift
Language: de

Technology

CDN: Amazon CloudFront
CMS: Drupal

Third-party hosts loaded (1)

sjs.e-fork.net×26

Social

Contact

Phone

035144400

Address

St. Joseph-Stift DresdenWintergartenstraße 15 / 17013

Registration

Updated

2025-07-21

Name servers

ns-1163.awsdns-17.org.
ns-1622.awsdns-10.co.uk.
ns-477.awsdns-59.com.
ns-537.awsdns-03.net.

DNS records live

NS

ns-1163.awsdns-17.org
ns-1622.awsdns-10.co.uk
ns-477.awsdns-59.com
ns-537.awsdns-03.net

MX

10 mx02.elisabeth-vinzenz.de

TXT

MS=07FBE9A1DC531DDF125678EA42A3FAB3E1741A86

Verified for

GlobalSign
Microsoft 365

Email authentication strong

SPF: v=spf1 mx ip4:52.31.43.128 -all
strict (-all)
DMARC: v=DMARC1; p=none; aspf=r; adkim=r; rua=mailto:dmarc_rua@elisabeth-vinzenz.de; ruf=mailto:dmarc_ruf@elisabeth-vinzenz.de; ri=3600
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Amazon ECDSA 256 M04

from 2026-01-26 to 2027-02-25

Expires in 280 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.josephstift-dresden.de/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.e-fork.net cdn.jsdelivr.net sjsdd.s3.eu-west-1.amazonaws.com reactjs.org www.w3.org player.vimeo.com www.youtube-nocookie.com http://www.w3.org; img-src 'self' data: *.e-fork.net cdn.jsdelivr.net sjsdd.s3.eu-west-1.amazonaws.com player.vimeo.com www.youtube-nocookie.com; frame-ancestors 'self' player.vimeo.com www.youtube-nocookie.com; form-action 'self'; style-src 'self' 'unsafe-inline';
strict-transport-security: max-age=31536000; includeSubDomains; preload;