mahr-edv.de
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Iubenda
Third-party hosts loaded (5)
- cdn.iubenda.com×3
- cs.iubenda.com×1
- js-eu1.hs-scripts.com×1
- www.facebook.com×1
- www.googletagmanager.com×1
Contact
DNS records live
- NS
-
- ns5.kasserver.com
- ns6.kasserver.com
- MX
-
- 10 mail.mahrtrix.de
- 20 mail1.mahrtrix.de
- TXT
-
MS=EF3353CFA0D257F346ABE34D579D6B531BBBDFDEabg-125-78hsophos-domain-verification=5becf5888f23f35acad52f0c0a50d83f8e62c21eeb9d70673cca7100846d2c01
- Verified for
-
- GlobalSign
Email authentication strong
- SPF
-
v=spf1 include:mahrtrix.de include:145054978.spf02.hubspotemail.net -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; sp=reject; aspf=s; rua=mailto:dmarc@mahrtrix.de!10m; ruf=mailto:dmarc@mahrtrix.de!10m; rf=afrf; pct=100; ri=86400policy: reject (enforced) · sp=reject - DKIM
- no key found at common selectors
Certificate (current)
GlobalSign RSA OV SSL CA 2018
Expires in 138 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
sameorigin- permissions-policy
geolocation=(self), microphone=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; img-src 'self' 'unsafe-inline' data: https://*.trustami.com https://*.kununu.com https://*.ytimg.com https://*.linkedin.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.hsforms.com https://*.hubspot.com https://static.hsappstatic.net https://*.w.org https://bat.bing.com https://*.happymo.re https://www.facebook.com https://*.lfeeder.com https://*.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.iubenda.com https://*.trustami.com https://*.jquery.com https://*.bootstrapcdn.com https://*.datatables.net https://*.hs-scripts.com https://*.hsforms.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.hsadspixel.net https://*.hs-analytics.net https://static.hsappstatic.net https://*.hubapi.com https://*.hubspot.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://*.goo- strict-transport-security
max-age=31536000; includeSubDomains;