sz-gipfel.de
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress 4.9.2 outdated (current 6.8)
Third-party hosts loaded (2)
- gmpg.org×1
- pc-emil.swmh.de×1
Social
Registration
- Updated
- 2026-04-16
- Name servers
-
- ns1.boreus.de.
- ns2.boreus.de.
- ns3.boreus.de.
- ns4.boreus.de.
DNS records live
- NS
-
- ns1.boreus.de
- ns2.boreus.de
- ns3.boreus.de
- ns4.boreus.de
Email authentication no MX
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 50 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation 'none'; midi 'none'; camera 'none'; usb 'none'; magnetometer 'none'; accelerometer 'none'; vr 'none'; speaker 'none'; ambient-light-sensor 'none'; gyroscope 'none'; microphone 'none'- x-content-type-options
nosniff- content-security-policy
upgrade-insecure-requests; frame-ancestors 'none'; default-src 'self'; script-src 'nonce-TLz/3upizpKsbYtbhOxtlw==' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' https: http:; object-src 'none'; base-uri 'self'; style-src 'self' 'unsafe-inline' *.doo.net *.googleapis.com *.google.com *.gstatic.com *.sueddeutsche.de; img-src 'self' data: *.doo.net www.youtube.com www.youtube-nocookie.com *.ytimg.com *.vimeo.com *.vimeocdn.com www.google.com www.google.de www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net www.linkedin.com *.ads.linkedin.com pc-emil.swmh.de; media-src 'self' www.youtube.com www.youtube-nocookie.com vimeo.com *.vimeo.com; frame-src 'self' vimeo.com *.vimeo.com doo.net *.doo.net securepay.swmh.de www.youtube.com www.youtube-nocookie.com *.ytimg.com *.gstatic.com www.googletagmanager.com *.google.com *.doubleclick.net pc-emil.swmh.de eventstream.rtl.de app.sli.do consent-cdn.sz-gipfel.de; font-src 'self' data: *.gstatic.com *.d- strict-transport-security
max-age=31536000; includeSubDomains
sz-gipfel.de