altair.de
HTML metadata
Technology
- CDN
- Cloudflare
Third-party hosts loaded (3)
- assets.adobedtm.com×1
- fast.wistia.com×1
- js.hsforms.net×1
Social
Registration
- Updated
- 2021-01-28
- Name servers
-
- auth04.ns.de.uu.net.
- auth54.ns.de.uu.net.
DNS records live
- NS
-
- auth04.ns.de.uu.net
- auth40.ns.uu.net
- auth54.ns.de.uu.net
- MX
-
- 10 altair-de.mail.protection.outlook.com
- 5 altair-de.mail.protection.outlook.com
- TXT
-
MS=ms77767604pffmpdf1k3nvs5yd8wbt99r3rlgrqh5nPX+TrxsXpcDnZMxz10Z1t2OCeJ8BGzdYfWzAapm4bKiakm/R3HridcaAuc0FBo66qjBeAUpRkL0HmOL0snJPSg==
Email authentication strong
- SPF
-
v=spf1 mx ip4:67.59.59.0/24 include:spf.protection.outlook.com include:sharepointonline.com include:47251.spf06.hubspotemail.net include:_spf.mailersend.net -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; pct=100policy: quarantine - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8g8xViyz6D8Lu0t9f2pwLG8zBmUytuBAqTo1IuI2tyPWofMWMo07dcgWWTj+qxQFTrCgL2qGPYCkPG3kAgm…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 55 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com *.google-analytics.com https://dec.azureedge.net/ munchkin.marketo.net *.wistia.com *.wistia.net http://js.hsforms.net/ https://forms.hsforms.com/ https://js.hs-banner.com https://js.hsleadflows.net *.hubspot.com https://js.hscollectedforms.net cdn.kendostatic.com https://az416426.vo.msecnd.net/ https://js.hsadspixel.net/ https://js.usemessages.com/ https://www.googletagmanager.com https://www.googleadservices.com *.demandbase.com https://rec.smartlook.com https://snap.licdn.com https://www.redditstatic.com https://tracking-cdn.figpii.com *.inspectlet.com https://statics-cdn.figpii.com slideslive.com/embed_presentation.js *- strict-transport-security
max-age=31536000; preload