lhg-webshop.de
HTML metadata
Technology
- Server
- Apache
- Stack
- PHP
Social
Contact
Registration
- Updated
- 2024-02-07
- Name servers
-
- ns1038.ui-dns.de.
- ns1050.ui-dns.biz.
- ns1067.ui-dns.com.
- ns1087.ui-dns.org.
DNS records live
- NS
-
- ns1038.ui-dns.de
- ns1050.ui-dns.biz
- ns1067.ui-dns.com
- ns1087.ui-dns.org
- MX
-
- 10 mx00.ionos.de
- 10 mx01.ionos.de
Email authentication partial
- SPF
-
v=spf1 include:_spf-eu.ionos.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 132 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
child-src *.1worldsync.com *.also.com *.dailymotion.com *.datpool.net *.electronicsales-mediaserver.de *.googletagmanager.com *.hotjar.com *.instagram.com *.itscope.com *.klarna.com *.paypal.com *.paypalobjects.com *.saferpay.com *.sparkassen-kreditkarten.de *.vimeo.com *.vimeocdn.com *.webtrends.com *.webtrendslive.com *.youtube-nocookie.com *.ytimg.com 3dsecure-cardprocess.de blob: demob2b.commercesolution.de http://files.electronicsales.de maps.google.com masteradmin3.commercesolution.de masteradmin3.es-shops.de media.onlineplus.store oxomi.com ws.cnetcontent.com www.electronicsales.de www.google.com www.sandbox.paypal.com 'self' 'unsafe-inline' *.youtube.com *.skrill.com *.facebook.net *.oxomi.com *.plus6.de mycliplister.com conversations-widget.brevo.com http://*.also.com; connect-src *.etrusted.com *.google-analytics.com *.google.com *.hotjar.com *.hotjar.io *.klarna.com *.minervafinance.de *.pingdom.net *.trustbadge.com cdn.cnetcontent.com google.com maps.googleapis.com oxomi.co- strict-transport-security
max-age=31536000; includeSubDomains; preload