umco.de
HTML metadata
Technology
- CMS
- Gatsby
Social
Contact
- Phone
Registration
- Updated
- 2023-08-24
- Name servers
-
- ns1.your-server.de.
- ns3.second-ns.de.
- ns.second-ns.com.
DNS records live
- NS
-
- ns.second-ns.com
- ns1.your-server.de
- ns3.second-ns.de
- MX
-
- 0 umco-de.mail.protection.outlook.com
- TXT
-
linkedin-site-verification=af9d0fc3-ac0c-4ad7-81c3-4b8e8ad277ba
- Verified for
-
- Apple
- Cisco
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:postmaster@umco.de; ruf=mailto:postmaster@umco.de; pct=100; fo=1;policy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswmrHwj8kUjTschIBYz5piqmwVQ9ILnLfEAml7QcCGXHYHYy5G81u2Dunyy5b2kZL2m7gH3MtULVCF… - selector2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4XHVM3LU9nYAX52QImpMSzMnFOkaL4+sdHBjTA6B3ZhKRBqMjoSQ9jrtS6G35sbzvco5ChfJZaZ8L…
selectors probed - selector1:
Certificate (current)
Thawte TLS RSA CA G1
Expires in 3 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), navigation-override=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), web-share=(self), xr-spatial-tracking=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://*; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*; style-src 'self' 'unsafe-inline' https://*; img-src 'self' data: blob: https://*; worker-src 'self' blob:; font-src 'self' data: https://*; connect-src 'self' webpack: https://*;- strict-transport-security
max-age=31536000;
Links to (2)
- linkedin.com×2
- xing.com×2