welt-ernaehrung.de
HTML metadata
Technology
- Server
- Apache
- CMS
- WordPress
Registration
- Updated
- 2019-03-12
- Name servers
-
- ns1.variomedia.de.
- ns2.variomedia.de.
DNS records live
- NS
-
- ns1.variomedia.de
- ns2.variomedia.de
- MX
-
- 10 mail.variomedia.de
Email authentication weak
- SPF
-
v=spf1 include:spf.variomedia.de ?allneutral (?all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 38 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' *.welt-ernaehrung.de welt-ernaehrung.de *.ithemes.com *.sucuri.net;img-src 'self' https://fastly.api.aspirecloud.net https://cdn-public.borlabs.io update.creona.net *.welt-ernaehrung.de ps.w.org s.w.org pw.chiapas.eu data: blob:;font-src 'self' 'unsafe-inline' *.welt-ernaehrung.de data:;style-src 'self' 'unsafe-inline' update.creona.net *.welt-ernaehrung.de;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.welt-ernaehrung.de *.ithemes.com *.sucuri.net s.w.org pw.chiapas.eu;media-src 'self' *.welt-ernaehrung.de;frame-src 'self' *.welt-ernaehrung.de pw.chiapas.eu https://www.youtube-nocookie.com;connect-src *.sucuri.net *.ithemes.com api.nintechnet.com *.welt-ernaehrung.de pw.chiapas.eu;frame-ancestors 'self' pw.chiapas.eu;- strict-transport-security
max-age=31536000, max-age=31536000