stadtwerke-wf.de
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
Third-party hosts loaded (2)
- app.cituro.com×1
- consent.cookiebot.eu×1
Social
Contact
Registration
- Updated
- 2022-06-14
- Name servers
-
- ns1.stwwf.de.
- ns2.stwwf.de.
DNS records live
- NS
-
- ns1.stwwf.de
- ns2.stwwf.de
- MX
-
- 10 swf-mx-01.vpx.de
- 50 swf-mx-02.vpx.de
- TXT
-
0994297b37949aead55c0a98715e43a8nn25ki00dehveju16go5lcqoem55gqt79fobdanhqd35loaov8ch
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 mx ip4:52.49.201.246/32 ip4:52.49.235.189/32 ip4:23.21.109.197/32 ip4:23.21.109.212/32 ip4:147.160.167.0/26 ip4:85.215.209.236/32 ip4:82.165.1.170/32 include:_spf.kundenserver.de include:_spf-eu.ionos.com include:spf.smtp.net -allstrict (-all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc@stadtwerke-wf.de; ruf=mailto:dmarc@stadtwerke-wf.de;policy: none (monitoring only) - DKIM
-
- mail:
v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/Bohe+DoYdPdwN0uuedaKUKHSWx+vE1UF953QLkLX3a+37V8dhxYQpneLJaQjQQrjGMNHtGRy4c4LWo4/6we9…
selectors probed - mail:
Certificate (current)
E7
Expires in 75 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://maps.google.com https://static.b-ite.com https://cs-assets.b-ite.com https://maps.googleapis.com https://consent.cookiebot.eu https://app.cituro.com https://cookiemanager.digitale-werke.de https://consentcdn.cookiebot.eu https://piwik.successnet.de; style-src 'unsafe-inline' 'self' https://app.cituro.com https://fonts.googleapis.com https://cookiemanager.digitale-werke.de; img-src 'self' data: https://i.ytimg.com https://img.sct.eu1.usercentrics.eu https://cookiemanager.digitale-werke.de https://maps.google.com https://maps.googleapis.com https://maps.gstatic.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://jobs.b-ite.com https://maps.googleapis.com https://cookiemanager.digitale-werke.de https://consentcdn.cookiebot.eu https://piwik.successnet.de; frame-src 'self' https://app.cituro.com https://consentcdn.cookiebot.eu https://www.youtube-nocookie.com https://global.frcapi.com https://meine.s- strict-transport-security
max-age=31536000; includeSubDomains, max-age=31536000; includeSubDomains