axa-betreuer.de
HTML metadata
Technology
- Server
- Apache
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- cdn.trustcommander.net×1
- www.googletagmanager.com×1
Social
Registration
- Updated
- 2018-02-22
- Name servers
-
- ns1.markmonitor.com.
- ns3.markmonitor.com.
- ns4.markmonitor.com.
- ns5.markmonitor.com.
- ns6.markmonitor.com.
DNS records live
- NS
-
- ns1.markmonitor.com
- ns3.markmonitor.com
- ns4.markmonitor.com
- ns5.markmonitor.com
- ns6.markmonitor.com
- MX
-
- 10 mxa-00181c02.gslb.pphosted.com
- 10 mxb-00181c02.gslb.pphosted.com
- TXT
-
7dUDsBJPMBY70mTVLOb7ChWCJSQDvyEQkbrNR5MtNtF1VrHamyhhdK9bBXQ7h7zP6aqG6dXFJmuMISSMGvg1DA==2m16kk9nc2bb9r6zpyhxdpf9cqkpx2vhm1j8m7z3c0cvy6997vy0zcv7g6c2nnv0
- Verified for
-
- Meta
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 include:spf-00181c02.pphosted.com a:mail01.axa.de -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; fo=1; pct=100; rua=mailto:dmarc.report@axa.com; ruf=mailto:dmarc.failure@axa.compolicy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA OV R36
Expires in 45 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
frame-src https://www.axa-video.de https://www.axa.de https://inte.axa.de https://*.fls.doubleclick.net https://optimize.google.com https://cdn.tagcommander.com https://cdn.trustcommander.net https://www.dwin1.com https://www.dbv.de https://www.axa-betreuer.de https://www.dbv-betreuer.de https://www.facebook.com 'self'; base-uri 'self'; object-src 'self'; script-src https://www.googleoptimize.com https://cdn.tagcommander.com https://cdn.trustcommander.net https://www.dwin1.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://bat.bing.com https://*.doubleclick.net https://www.axa-video.de https://www.google.com https://cdn.ampproject.org https://platform.commandersact.com https://optimize.google.com https://inte.axa.de https://www.axa.de https://inte.dbv.de https://www.dbv.de https://www.axa-betreuer.de https://www.dbv-betreuer.de https://maps.google.com https://connect.facebook.net 'self' 'unsafe-inli- strict-transport-security
max-age=31536000