uni-graz.at
HTML metadata
Technology
- Server
- nginx
Social
DNS records live
- NS
-
- ns10.univie.ac.at
- ns5.univie.ac.at
- nskfug.uni-graz.at
- nsresowi.uni-graz.at
- MX
-
- 10 mbug29.uni-graz.at
- 20 mbug28.uni-graz.at
- 30 mbug18.uni-graz.at
- 40 mbug19.uni-graz.at
- Verified for
-
- Adobe
- Cisco
- Microsoft 365
- TeamViewer
- Zoom
Email authentication weak
- SPF
-
v=spf1 ip4:143.50.0.0/16 ip4:52.157.149.216 ip4:18.192.64.90 ip4:3.78.152.223 ip4:52.58.1.92 ip4:85.158.228.40/30 include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
GEANT TLS ECC 1
Expires in 257 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer- x-frame-options
deny- permissions-policy
accelerometer=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "https://www.youtube.com"), autoplay=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "https://www.youtube.com"), clipboard-write=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "https://www.youtube.com"), encrypted-media=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "https://www.youtube.com"), fullscreen=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "https://www.youtube.com"), gyroscope=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "https://www.youtube.com"), picture-in-picture=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "https://www.youtube.com"), web-share=(self "https://unitube.uni-graz.at" "https://open.spotify.com" "https://www.vimeo.com" "ht- x-content-type-options
nosniff- content-security-policy
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.uni-graz.at https://webcmp.uni-graz.at https://oembed.uni-graz.at https://bezahlung.uni-graz.at https://webstat.uni-graz.at https://ask.uni-graz.at https://beta.ug.aios.dev https://*.googletagmanager.com https://connect.facebook.net blob: 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: https://static.uni-graz.at https://bezahlung.uni-graz.at https://online.uni-graz.at https://screenshot.uni-graz.at https://webstat.uni-graz.at https://ask.uni-graz.at https://beta.ug.aios.dev https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.at https://pagead2.googlesyndication.com https://www.facebook.com; base-uri 'self'; frame-src 'self' https://static.uni-graz.at https://webstat.uni-graz.at https://unitube.uni-graz.at https://*.googletagmanager.com https://td.doubleclick.net https://open.spotify.com https
Links to (8)
- bsky.app×1
- e-publikation.de×1
- facebook.com×1
- google.com×1
- instagram.com×1
- kununu.com×1
- linkedin.com×1
- youtube.com×1