schnitt-gut.de
HTML metadata
Technology
- Server
- Apache
Registration
- Updated
- 2023-11-29
- Name servers
-
- ns67.domaincontrol.com.
- ns68.domaincontrol.com.
DNS records live
- NS
-
- ns67.domaincontrol.com
- ns68.domaincontrol.com
- MX
-
- 100 mail.ak-neuss.de
- TXT
-
v=spf1 a mx ip4:83.236.136.44 include:spf.dynect.net ~all
- Verified for
-
Certificate (current)
R13
Expires in 65 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'nonce-74c2fcd828086892a763e9d2' player.vimeo.com secure.fundraisingbox.com *.instagram.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.youtube.com tracker.augustinus.digital; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' *.savita.de em.altruja.de secure.fundraisingbox.com *.ytimg.com maps.googleapis.com *.g.doubleclick.net *.gstatic.com *.google.com *.google.com.co *.google.de *.google.ch *.google.at *.google.it *.google.co.uk *.google.com.mx *.google.com.bd *.google.co.ma *.google.lu *.google.nl *.facebook.com *.google-analytics.com *.googletagmanager.com data:; media-src 'self' data:; frame-src 'self' em.altruja.de *.youtube-nocookie.com player.vimeo.com *.instagram.com secure.fundraisingbox.com *.facebook.com; font-src 'self'; connect-src 'self' eyeabletranslatespeeq8kurzpv-con-transl-speech.functions.fnc.fr-par.scw.cloud *.g.doubleclick.net *.google-analytics.c- strict-transport-security
max-age=31536000; preload