xcarstens.de
HTML metadata
Technology
- Server
- railway-edge
- CMS
- Next.js
Social
Contact
Registration
- Updated
- 2024-10-25
- Name servers
-
- docks11.rzone.de.
- shades02.rzone.de.
DNS records live
- NS
-
- docks11.rzone.de
- shades02.rzone.de
- MX
-
- 20 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 200 mx03.hornetsecurity.com
- 200 mx04.hornetsecurity.com
- TXT
-
MS=ms81565150google-site-verification=MZJy0Qq967s5G1hJtloLTNKl-93x3kSS3_U585_VBOk
Email authentication strong
- SPF
-
v=spf1 mx a:mx01.luttermann.de ip4:94.130.131.91 ip4:94.130.69.101 ip4:62.214.154.208/28 include:_spf.strato.com include:spf-de.emailsignatures365.com include:spf.hornetsecurity.com include:spf.protection.outlook.com include:sendgrid.net -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; pct=100; ruf=mailto:postmaster@sanitaetshaus-carstens.de;policy: reject (enforced) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN4lXxwYTLeJHmD9mCujFWztwxDn2dTp0OGd7qT4cvQLthXQJtuaclzQuCXSNX36RDNzNg1cwjeqw7p6in… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U+DKl6//qLkV7nFdNTH97StoWqFGT3wmBRA39JFZJlUtOgiFoWfehmlojFeOk8JTsH+Nj+FuJ1VuyVl/5…
selectors probed - s1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 255 days
HTTP security headers
- present
-
- content-security-policy
- x-content-type-options
- referrer-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.tailwindcss.com https://auxilium.eu.auth0.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://auxilium.eu.auth0.com; img-src 'self' data: https:; font-src 'self' data: https://cdn.tailwindcss.com; connect-src 'self' https: https://auxilium.eu.auth0.com; frame-src 'self' https://bot.resilo.online https://platform.resilo.ai https://widgetblob.blob.core.windows.net https://www.google.com/maps; object-src 'none'; frame-ancestors 'self' https://up-monitoring-app-production.up.railway.app https://monitoring.updesignstudio.de http://localhost:* https://cms.auxiliumgruppe.online https://directus-directus-testing.up.railway.app; base-uri 'self';
Links to (6)
- doctolib.de×2
- facebook.com×2
- instagram.com×2
- linkedin.com×2
- smina.de×2
- tiktok.com×2