praxis-jessen.de
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
- jQuery
- 3.7.1
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (4)
- cdn.eye-able.com×2
- access.eye-able.com×1
- dr-flex.de×1
- web.cmp.usercentrics.eu×1
Contact
Registration
- Updated
- 2025-09-16
- Name servers
-
- dns1.cscdns.net.
- dns2.cscdns.net.
DNS records live
- NS
-
- dns1.cscdns.net
- dns2.cscdns.net
- MX
-
- 10 mailin3.dcpserver.de
- 9 mailin.dcpserver.de
Email authentication weak
- SPF
-
v=spf1 include:spf.dcpserver.de -allstrict (-all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 62 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://dr-flex.de *.googlesyndication.com *.googleapis.com *.cookiebot.com www.googletagmanager.com tagmanager.google.com www.google.com www.google.de www.gstatic.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net https://cdn.eye-able.com/configs/www.praxis-jessen.de.js https://cdn.eye-able.com/public/js/eyeAble.js https://access.eye-able.com https://web.cmp.usercentrics.eu https://www.googletagmanager.com blob:; worker-src 'self' blob:; style-src 'self' https://cdn.eye-able.com 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https://secure.gravatar.com https://cdn.eye-able.com https://app.usercentrics.eu https://uct.service.usercentrics.eu *.googleapis.com ssl.gstatic.com www.gstatic.com googleads.g.doubleclick.net www.google.com www.google.de www.google-analytics.com assets.vercel.com vercel.com vercel.live https://*.google-analy