WebForensik
Results for https://more-eyes.de/
Scan time: 2026-11-04 21:55:13
Overall Score
Changes since the last scan 0
Compared with scan from 04.11.2026 18:09 (Score 95 → 95) · View full history
✓ Protections gained: dns_ipv6_yes
Score history for this domain View full history →
✔ This website meets basic data protection requirements.
Note: This automated analysis does not replace legal advice. For a complete GDPR assessment, consult a data protection officer.
↓ See detailed results for each category below.
The website uses an encrypted connection (HTTPS).
Latest encryption active (TLS 1.3 — TLSv1.3).
The security certificate is valid (expires 2027-01-20).
Strong encryption method (TLS_AES_256_GCM_SHA384, 256 bit).
HSTS is enabled — the browser is instructed to always use the encrypted connection.
HSTS duration: 31536000 seconds (at least 1 year) — very good.
HSTS also applies to all subdomains (includeSubDomains).
Content Security Policy present (via HTTP-Header).
Script sources are properly restricted.
Embedding protection (frame-ancestors) is configured — protects against clickjacking.
Good base rule: only own content is allowed by default (default-src: self).
Referrer-Policy: strict-origin-when-cross-origin (via HTTP-Header).
Strict setting "strict-origin-when-cross-origin" — no path leak, no HTTP downgrade leak. Best practice.
MIME type protection active (nosniff) — browsers will not misinterpret files.
Clickjacking protection active via CSP frame-ancestors.
Permissions-Policy is configured — access to sensitive device APIs is controlled.
5 of 6 sensitive APIs restricted — very good.
No cookies set — exemplary for privacy.
No local storage (Web Storage) used — no tracking risk.
No third-party requests detected — all content comes from the website's own server.
No known trackers detected.
No external scripts or stylesheets loaded.
CAA records present: sectigo.com, letsencrypt.org, digicert.com — only specified certificate authorities may issue certificates.
4 nameservers present — good redundancy.
IPv6 support present (AAAA records).
SPF record present: v=spf1 include:_spf-eu.ionos.com ~all — protects against email spoofing.
DMARC record present: v=DMARC1; p=none; — email authentication active.
security.txt found: https://more-eyes.de/.well-known/security.txt
Contact field present (required) — security researchers can report vulnerabilities.
Expires field present (required).
Preferred languages specified.
No external reporting endpoints detected.
No consent banner needed — no trackers or third-party cookies detected.
Privacy policy linked: "Privacy" (/datenschutz/).
Legal notice linked: "Legal Notice" (/impressum/).
Privacy policy page is accessible (HTTP 200).
| Header | Value |
|---|---|
| connection | keep-alive |
| content-encoding | gzip |
| content-security-policy | default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests |
| content-type | text/html |
| cross-origin-opener-policy | same-origin |
| date | Wed, 04 Nov 2026 20:55:10 GMT |
| etag | W/"6aeb615b-403c" |
| last-modified | Wed, 04 Nov 2026 16:46:19 GMT |
| permissions-policy | camera=(), microphone=(), geolocation=(), payment=(), usb=(), browsing-topics=() |
| referrer-policy | strict-origin-when-cross-origin |
| server | nginx/1.24.0 (Ubuntu) |
| strict-transport-security | max-age=31536000; includeSubDomains |
| transfer-encoding | chunked |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
Embed your score on your website
Show your WebForensik score publicly. The badge is a lightweight SVG, loads fast, and respects your visitors' privacy (no tracking).
HTML code to embed (this specific scan)
<a href="https://webforensik.de/results.php?id=4091" target="_blank" rel="noopener">
<img src="https://webforensik.de/badge.php?id=4091" alt="WebForensik Score" width="174" height="28">
</a>Or dynamically — always shows the latest scan of this domain
<a href="https://webforensik.de/?url=https://more-eyes.de" target="_blank" rel="noopener">
<img src="https://webforensik.de/badge.php?domain=more-eyes.de" alt="WebForensik Score" width="174" height="28">
</a>