jugend-debattiert.de
HTML metadata
Technology
- Server
- Apache
Social
Contact
- Phone
Registration
- Updated
- 2026-02-12
- Name servers
-
- a.ns14.net.
- b.ns14.net.
- c.ns14.net.
- d.ns14.net.
DNS records live
- NS
-
- a.ns14.net
- b.ns14.net
- c.ns14.net
- d.ns14.net
- MX
-
- 10 mxext1.mailbox.org
- 10 mxext2.mailbox.org
- 20 mxext3.mailbox.org
Email authentication weak
- SPF
-
v=spf1 mx a include:mail.psmanaged.com include:mailbox.org ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Encryption Everywhere DV TLS CA - G2
Expires in 137 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak content type protection
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- permissions-policy
fullscreen=(*)- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self' https://jugend-debattiert.localhost/ https://intern.jugend-debattiert.localhost https://jugend-debattiert-weltweit.localhost/ https://intern.jugend-debattiert-weltweit.localhost https://*.jugend-debattiert.do.plusb.de https://*.intern.jugend-debattiert.do.plusb.de https://*.weltweit.jugend-debattiert.do.plusb.de https://*.intern.weltweit.jugend-debattiert.do.plusb.de https://*.jugend-debattiert.de https://*.jugend-debattiert-weltweit.de https://*.staging.jugend-debattiert.de https://*.staging.jugend-debattiert-weltweit.de https://*.jugend-debattiert.de.vm https://*.jugend-debattiert-weltweit.de.vm https://*.googleapis.com https://*.gstatic.com https://www.google-analytics.com; script-src 'self' 'nonce-Zm0YiyywOq6eziZGVsGD8jLDmSILwrfC3hTu0E321ag2etLhBS1A4g' https://maps.google.com https://www.google-analytics.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: https://jugend-debattiert.localhost/ h- strict-transport-security
max-age=31536000; includeSubDomains