novoferm-extranet.de
HTML metadata
Technology
- Server
- nginx
Third-party hosts loaded (1)
- beyond-cookiebanner.de×1
Social
Registration
- Updated
- 2024-10-09
- Name servers
-
- a.ns14.net.
- b.ns14.net.
- c.ns14.net.
- d.ns14.net.
DNS records live
- NS
-
- a.ns14.net
- b.ns14.net
- c.ns14.net
- d.ns14.net
- MX
-
- 1 mx0.mail.ovh.net
- 10 mx1.mail.ovh.net
- 20 mx2.mail.ovh.net
- 30 mx3.mail.ovh.net
- 40 mx4.mail.ovh.net
Email authentication weak
- SPF
-
v=spf1 mx a include:mx.ovh.com ip4:134.119.248.40 ip6:2a00:1158:400:405::28 ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 55 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak content type protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self' https://beyond-cookiebanner.de data:; script-src 'self' 'nonce-GWUrKvbOmceY7isugXjTN4k92ufYSWIRlsGnEvHVv8i6DjbSI66eKg' 'strict-dynamic' https://beyond-cookiebanner.de https://sst.novoferm.at https://sst.novoferm.ch https://sst.novoferm.com https://sst.novoferm.de https://sst.novoferm-extranet.de https://sst.novoferm.dk https://sst.novoferm.nl https://sst.novoferm.pl https://sst.novoferm.cz https://sst.novoferm.gr https://sst.novoferm.bg https://sst.novoferm-romania.ro https://digital.novoferm-loesungen.de; style-src-attr 'unsafe-inline'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://beyond-cookiebanner.de https://digital.novoferm-loesungen.de https://*.google.com https://*.google.de https://*.googletagmanager.com https://*.bing.com https://*.facebook.com https://novoferm-loesungen.de http://novoferm-loesungen.de https://stats.crsend.com https://files.crsend.com https://novoferm-rs-extranet.bm-stage.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.co- strict-transport-security
max-age=31536000