advita.de
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Nuxt
- Analytics
-
- Cloudflare Insights
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (6)
- a.storyblok.com×24
- challenges.cloudflare.com×1
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- static.cloudflareinsights.com×1
- www.googletagmanager.com×1
Social
Registration
- Updated
- 2024-07-25
- Name servers
-
- ns5.kasserver.com.
- ns6.kasserver.com.
DNS records live
- NS
-
- ns5.kasserver.com
- ns6.kasserver.com
- MX
-
- 10 mxa-00528302.gslb.pphosted.com
- 10 mxb-00528302.gslb.pphosted.com
- TXT
-
Show 8 TXT records
apple-domain-verification=vCuaAdqLsbjqjuCTwombat-verification=3KwxVCQV1HEp-aRXRTKKaZ5G0frhkms-domain-verification=890e1997-fd09-496a-9e3c-1cd588d6449a75jfbg3r161jtita856n649av9MS=989A3955269F6E39C512F466270C85240D9489E794uo2af80ms4o15f12291286m6have-i-been-pwned-verification=48b31594b17911f7277f1219d4c05aedasv=3c97cd00563e97ee11002ace70fb2149
Email authentication strong
- SPF
-
v=spf1 a mx ip4:85.13.0.0/16 ip4:93.241.77.248 ip4:91.151.20.15 include:spf-00528302.pphosted.com include:spf.protection.outlook.com include:spf-de.emailsignatures365.com include:139491025.spf07.hubspotemail.net -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine;policy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDWfiGFuU6iFbhK6mvVIQMUuX45MEQbsfdXl6MsDyT/cMPJCM7/zpguz1BTlFEV9dJI4GuVmJsWiVmestkLf3… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9qmkBHM3ERIJS4fk4hREEhUkPvoPBC8WAn/4vObkCar7gZDDImbh4oBEb01nXBK3+H5w1rBhGpxt2HHWK… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6iUypGeo/bxeKG7YRQ656cNfeBkCWNEuLLz2cXsjxRZ3NsY5aE/ZvJJ5RX2ITY2JAsfl6x1TaFBp2UL4/BKDHRw…
selectors probed - selector1:
Certificate (current)
E7
Expires in 75 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(self), microphone=()- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors self https:; img-src 'self' data: https:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests- strict-transport-security
max-age=15552000; includeSubDomains- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-origin