pflegeabc.de
HTML metadata
Technology
- CDN
- Cloudflare
Third-party hosts loaded (7)
- cdn.mycourse.app×60
- lwfiles.mycourse.app×28
- cdn.weglot.com×1
- cdnjs.cloudflare.com×1
- releases.transloadit.com×1
- widgets.targetbox.de×1
- www.google.com×1
Social
Contact
- Phone
Registration
- Updated
- 2023-02-09
- Name servers
-
- docks13.rzone.de.
- shades04.rzone.de.
DNS records live
- NS
-
- docks13.rzone.de
- shades04.rzone.de
- MX
-
- 10 smtp.google.com
- TXT
-
lw=64537198c1467715cb6c470d
- Verified for
-
- 1Password
- Apple
- Atlassian
- Zapier
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com include:_spf.getresponse.com include:mailgun.org include:47634038.spf08.hubspotemail.net include:mail.zendesk.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc@pflegeabc.depolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 44 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
microphone=*, camera=*- x-content-type-options
nosniff- content-security-policy
default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src data: * 'unsafe-inline' blob:; img-src * data: blob: 'unsafe-inline'; frame-src * blob:; style-src * data: 'unsafe-inline'; font-src * data: 'unsafe-inline'; worker-src * blob:;
Links to (5)
- apple.com×2
- facebook.com×2
- google.com×2
- instagram.com×2
- personio.de×2
pflegeabc.de