noetutgut.at
HTML metadata
Technology
- CDN
- Amazon CloudFront
- Server
- Apache
- Stack
- PHP
Third-party hosts loaded (1)
- cdn.jsdelivr.net×1
Social
DNS records live
- NS
-
- dns1.akis.at
- dns2.akis.at
- MX
-
- 10 mxt.lknoe.at
- Verified for
-
- GlobalSign
Email authentication partial
- SPF
-
v=spf1 a mx a:spf.edis.at ip4:195.202.167.251 ip4:85.236.55.224/27 -include:spf.dialog-mail.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc_rua@noetutgut.atpolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 181 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'unsafe-inline' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com maps.googleapis.com maps.gstatic.com vumbnail.com img.youtube.com blob: secure.dialog-mail.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com secure.dialog-mail.com *.stornaway.io https://kahoot.it; script-src-elem 'unsafe-inline' https: 'unsafe-eval' blob: 'report-sample'; connect-src 'self' maps.googleapis.com maps.gstatic.com statistik.noetutgut.at vimeo.com blob:; style-src 'self' fonts.googleapis.com 'unsafe-inline' 'unsafe-hashes' 'report-sample'; font-src 'self' fonts.gstatic.com; object-src 'self' none; report-uri https://www.noetutgut.at/@http-reporting?csp=report&requestTime=1779873867956795&requestHash=ee73aeb02adb930fb4f822981b4d31f4867856dc- strict-transport-security
max-age=31536000; includeSubDomains; preload