baywa-re.co.uk
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Nuxt
Third-party hosts loaded (3)
- a.storyblok.com×2
- images.admiralcloud.com×2
- consent-eu.cookiefirst.com×1
Social
Registration
- Registrar
- INWX GmbH
- Created
- 2013-02-20
- Expires
- 2027-02-20 275 days left
- Updated
- 2026-02-20
- Name servers
-
- alexis.ns.cloudflare.com.
- dorthy.ns.cloudflare.com.
DNS records live
- NS
-
- alexis.ns.cloudflare.com
- dorthy.ns.cloudflare.com
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- 50 bayware-co-uk01c.mail.protection.outlook.com
- TXT
-
mindmanager-verification=171012c9a16ba9158fb7346114456e749ff67ae83747af444ea7f5bc7c6c5ebeTvYT6vN0flbnQBFQ46Lj6526Gw6glV7pVEe+C+yEeiAPSZEagpbJ6oCCJa+dcBeogRRVynkrxyApXVB5RByvqQ==
- Verified for
-
- Atlassian
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 mx ip4:5.152.188.10/24 ip4:46.37.162.82 ip4:62.245.228.58 ip4:62.245.228.61 ip4:82.153.14.115 ip4:167.216.128.0/22 ip4:64.89.44.0/23 ip4:207.211.31.0/25 a:mail.baywa-re.com include:mailsenders.netsuite.com include:spf.protection.outlook.com include:spf.hornetsecurity.com -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.emailpolicy: quarantine - DKIM
-
- selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+CRk2o/Ep4DSgr7/7FY18ZQQ+nGVoTsjYCZXg+BCb/OXYnMODacm1tMC/PC8bTeHoHn2Fyjrcz5l7c5LWaR…
selectors probed - selector2:
Certificate (current)
WE1
Expires in 78 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
Header values
- referrer-policy
no-referrer- x-frame-options
ALLOW-FROM storyblok.com- permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' https://app.storyblok.com; img-src 'self' data: *.storyblok.com *.baywa-re.com *.bayware-webdev.com images.admiralcloud.com imagebasics.admiralcloud.com *.googleapis.com maps.gstatic.com tm.baywa-re.com consent.cookiefirst.com https://www.google.de https://www.google.com https://google.com https://www.facebook.com googletagmanager.com *.googletagmanager.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://region1.analytics.google.com *.google-analytics.com https://t.co https://analytics.twitter.com *.g.doubleclick.net www.googleadservices.com pagead2.googlesyndication.com fonts.gstatic.com; object-src 'none'; script-src-attr 'self' 'unsafe-hashes' 'sha256-bwK6T5wZVTANitXbrTsel7kl/PyCjCd/Dq5Qoz3imjM='; style-src 'self' https: 'unsafe-inline' images.admiralcloud.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' player.admiralcloud.com https://errors.dkd.de; upgrade-insecure- strict-transport-security
max-age=15552000; includeSubDomains- cross-origin-opener-policy
same-origin