mpi-bremen.de
HTML metadata
Technology
- Server
- Apache
Social
Registration
- Updated
- 2025-03-04
- Name servers
-
- dns-1.dfn.de.
- dns-2.dfn.de.
- ns-ext.mpi-bremen.de.
DNS records live
- NS
-
- dns-1.dfn.de
- dns-2.dfn.de
- ns-ext.mpi-bremen.de
- MX
-
- 10 edge-01.mpi-bremen.de
- TXT
-
zdiscover https://mail.mpi-bremen.de/webapp/
- Verified for
-
- Adobe
- Apple
- Cisco
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 ip4:194.95.6.0/23 ip4:134.102.40.0/28 a mx include:spf.gwdg.de -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=quarantine; rua=mailto:dmarcana@mpi-bremen.de; ruf=mailto:dmarcana@mpi-bremen.de; fo=1;policy: none (monitoring only) · sp=quarantine - DKIM
- no key found at common selectors
Certificate (current)
GEANT TLS ECC 1
Expires in 194 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; frame-src 'self' *.mpi-bremen.de www.youtube-nocookie.com www.youtube.com www.planblue.com; script-src 'self' *.mpi-bremen.de www.youtube.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' *.mpi-bremen.de; worker-src 'self' blob:; frame-ancestors 'self' *.mpi-bremen.de- strict-transport-security
max-age=63072000; includeSubdomains; preload