mann-schroeder.de
HTML metadata
Technology
- Server
- nginx
- Cookie consent
-
- Usercentrics
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (2)
- app.usercentrics.eu×1
- www.youtube-nocookie.com×1
Registration
- Updated
- 2018-07-27
- Name servers
-
- vsrv01.musdns.de.
- vsrv02.musdns.de.
- vsrv03.musdns.de.
DNS records live
- NS
-
- vsrv01.musdns.de
- vsrv02.musdns.de
- vsrv03.musdns.de
- MX
-
- 10 de-smtp-inbound-1.mimecast.com
- 20 de-smtp-inbound-2.mimecast.com
- TXT
-
0ed1fe018a1cc1d9c4b3c54777b5ebc5fb0dac07f5
- Verified for
-
- Apple
- Cisco
- Google Workspace
Email authentication strong
- SPF
-
v=spf1 ip4:153.92.85.196 ip4:153.92.85.197 include:de._netblocks.mimecast.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:hostmaster@mann-schroeder.de; ruf=mailto:hostmaster@mann-schroeder.de; fo=1policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 57 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing frame protection
Header values
- referrer-policy
strict-origin-when-cross-origin- permissions-policy
accelerometer=(), autoplay=(), camera=(), clipboard-read=(), clipboard-write=(self), display-capture=(), encrypted-media=(self), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(self), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://mann-schroeder.softgarden.io; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.usercentrics.eu https://api.usercentrics.eu https://web.cmp.usercentrics.eu https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://snap.licdn.com https://px.ads.linkedin.com https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.google-analytics.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://www.linkedin.com https://i.ytimg.com https://img.youtube.com https://app.usercentrics.eu https://web.cmp.usercentrics.eu; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://app.usercentrics.eu https://api.usercentrics.eu https://web.cmp.userc- strict-transport-security
max-age=31536000; includeSubDomains
Links to (4)
- facebook.com×1
- kununu.de×1
- linkedin.com×1
- xing.com×1