mint-in-hessen.de
HTML metadata
Technology
Third-party hosts loaded (1)
- cdn.hessen-agentur.de×3
Social
Contact
Registration
- Updated
- 2024-05-16
- Name servers
-
- root-dns.netcup.net.
- second-dns.netcup.net.
- third-dns.netcup.net.
DNS records live
- NS
-
- root-dns.netcup.net
- second-dns.netcup.net
- third-dns.netcup.net
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 64 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
allow-from *- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hessen-agentur.de blob:; object-src 'self' https://*.hessen-agentur.de; connect-src 'self' 'unsafe-inline' https://nominatim.openstreetmap.org https://*.googleapis.com https://*.twitter.com https://*.twimg.com https://*.hessen-agentur.de; media-src 'self' blob: http://*.hessen-agentur.de https://*.hessen-agentur.de ; default-src 'self' * blob:; img-src 'self' * blob: data: https://*.hessen-agentur.de; style-src 'self' https://*.hessen-agentur.de 'unsafe-inline'; font-src 'self' https://*.hessen-agentur.de https://*.mint-in-hessen.de- strict-transport-security
max-age=31536000