kbw-blickle.de
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- PHP
- 8.3.31 security-only
Contact
- Address
- Peter-Henlein-Straße 19, 78056, Villingen-Schwenningen, Baden-Württemberg, DE
Registration
- Updated
- 2025-05-19
- Name servers
-
- ns1044.ui-dns.com.
- ns1100.ui-dns.org.
- ns1105.ui-dns.de.
- ns1114.ui-dns.biz.
DNS records live
- NS
-
- ns1044.ui-dns.com
- ns1100.ui-dns.org
- ns1105.ui-dns.de
- ns1114.ui-dns.biz
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- TXT
-
v=verifydomain MS=6259434
Email authentication weak
- SPF
-
v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:spf.protection.outlook.com include:spf.hornetsecurity.com mx ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 110 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; child-src 'self'; connect-src 'self'; default-src 'none'; font-src 'self' 'unsafe-inline' data: *.gstatic.com cdnjs.cloudflare.com; form-action 'self'; frame-ancestors 'self'; frame-src 'unsafe-inline' data: *.google.com *.youtube-nocookie.com; img-src 'self' data: *.google.com *.googleapis.com *.gstatic.com *.tile.openstreetmap.org cdn.jsdelivr.net i.ytimg.com; media-src 'self'; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' * data: *.google.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com goo.gl https://kbw-blickle.de; style-src 'unsafe-inline' * blob: *.google.com *.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com https://kbw-blickle.de;- strict-transport-security
max-age=31556926; includeSubDomains; preload