tivoli.de
HTML metadata
Technology
- Server
- Apache
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (3)
- code.etracker.com×1
- static.cleverpush.com×1
- web.eu1.cmp.usercentrics.eu×1
Social
Contact
Registration
- Updated
- 2026-03-04
- Name servers
-
- borderzone.work.de.
- hulk.work.de.
- ns.work.de.
DNS records live
- NS
-
- borderzone.work.de
- hulk.work.de
- ns.work.de
- MX
-
- 10 mailscanner01.work.de
- 10 mailscanner02.work.de
- 10 mailscanner03.work.de
- TXT
-
asv=5076fad10b654de5784640fbbf86f092google-site-verification=FS8m0rgL3lBvlw18QuI1fQMAmX-ns5ROQz1Y2TA9nGw
Email authentication partial
- SPF
-
v=spf1 include:workspf.work.de include:_c.spf.tivoli.de include:_b.spf.tivoli.de ip6:2a00:ea8:8119::200 ip6:2a00:ea8:8119::100 ip6:2a00:ea8:8113:0:213:238:46:94 ip4:212.12.37.187 ip4:87.253.164.99 ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
E7
Expires in 42 days
HTTP security headers
- present
-
- content-security-policy
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self' https: data: blob: 'unsafe-inline'; upgrade-insecure-requests; script-src 'self' blob: https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:; frame-src 'self' *.pierdrei-hotel.de www.superbude.com www.superbude.de slotmachine.tivoli.de google.com *.google.com youtube.com www.youtube.com youtube-nocookie.com www.youtube-nocookie.com spotify.com *.spotify.com *.podigee-cdn.net web.inxmail.com https://app.usercentrics.eu; frame-ancestors 'self' https://slotmachine.tivoli.de https://*.etracker.com;