unikai.de
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
Contact
- Phone
Registration
- Updated
- 2018-08-18
- Name servers
-
- ns1120.ui-dns.biz.
- ns1120.ui-dns.com.
- ns1120.ui-dns.de.
- ns1120.ui-dns.org.
DNS records live
- NS
-
- ns1120.ui-dns.biz
- ns1120.ui-dns.com
- ns1120.ui-dns.de
- ns1120.ui-dns.org
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- TXT
-
Show 6 TXT records
atlassian-sending-domain-verification=21f4955e-60af-4843-9c2a-05e7d608322fgoogle-site-verification=lJsAs4yOe0nX6lY6kTXE1CriiLNYcRcLG-il1Yv82bIatlassian-domain-verification=UKjiClS7fGO5rCVbtZ9brj9YiiivhoI36IVm0LDlTVfwnAXvJZsCszJJFJFhf6AaMS=FA63319EEA2D9402A04FC753E381068C2F710A32MS=ms13017729apple-domain-verification=ixKXq6qL4wD8JGTJ
Email authentication partial
- SPF
-
v=spf1 include:spf.hornetsecurity.com ip4:213.217.87.133 ip4:84.46.69.82 include:spf.protection.outlook.com include:_spf.kundenserver.de include:_spf.atlassian.net a:mail1.hhla.de a:mail2.hhla.de -allstrict (-all) - DMARC
-
v=DMARC1; p=none; pct=100; fo=1; rua=mailto:a.i2dwlno2@reports.hornetdmarc.compolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDjjfbqeq9Q9b9n7oG+y7vvAv2IggXAjmyQUopFJBP6Dts/OeIjXm6HlYhamr37PxcYnxZMYYeWGwW…
selectors probed - selector1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 175 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://statistik.unikai.de; script-src-elem 'self' 'unsafe-inline' https://statistik.unikai.de; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.fonts.net; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.fonts.net; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.fonts.net https://fast.fonts.net https://*.fonts.net; connect-src 'self' https: https://statistik.unikai.de; frame-src 'self' https://www.youtube.com https://player.vimeo.com- strict-transport-security
max-age=63072000; includeSubDomains