baywa-re.pl
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Nuxt
- JS framework
- Nuxt
- Analytics
-
- Cloudflare Insights
Third-party hosts loaded (4)
- images.admiralcloud.com×3
- a.storyblok.com×1
- consent-eu.cookiefirst.com×1
- static.cloudflareinsights.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- alexis.ns.cloudflare.com
- dorthy.ns.cloudflare.com
- MX
-
- 10 mx01.hornetsecurity.com
- 20 mx02.hornetsecurity.com
- 30 mx03.hornetsecurity.com
- 40 mx04.hornetsecurity.com
- 50 bayware-pl01c.mail.protection.outlook.com
- TXT
-
ZC41iYm1BgguasPJ/W/aTssKJHKSfvM3TvTrXl1F/Sd/p5W6zKvFDY4wZ+2tM0CQT6If1M1AEQqLbsdp3fBB1g==mindmanager-verification=171012c9a16ba9158fb7346114456e749ff67ae83747af444ea7f5bc7c6c5ebe
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 a mx a:mail.baywa-re.com mx:baywa-re.com ip4:82.135.107.28 ip4:62.245.228.58 ip4:81.92.166.57 ip4:213.95.199.68 ip4:62.245.228.60 include:spf.protection.outlook.com include:spf.hornetsecurity.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.emailpolicy: none (monitoring only) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnJa4vhAUYUdN3i7wCqwpWrp2Xn7BTHYieklLELtKpUrsWZoAWq7nUnhMRqdDIz1MywDCgzdf2dwGkF43BoG… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwUXlVuZVG/Hd+CqOUystx9GYY0hKy4fCwck4yXVeJD/H12XqdnIit55zIh/r7xFKQQ95GdZAeaR/OOGD02D…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 32 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
Header values
- referrer-policy
no-referrer- x-frame-options
ALLOW-FROM storyblok.com- permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self' https://app.storyblok.com; img-src 'self' data: *.storyblok.com *.baywa-re.com *.bayware-webdev.com images.admiralcloud.com imagebasics.admiralcloud.com *.googleapis.com maps.gstatic.com tm.baywa-re.com consent.cookiefirst.com https://www.google.de https://www.google.com https://google.com https://www.facebook.com googletagmanager.com *.googletagmanager.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://region1.analytics.google.com *.google-analytics.com https://t.co https://analytics.twitter.com *.g.doubleclick.net www.googleadservices.com pagead2.googlesyndication.com fonts.gstatic.com; object-src 'none'; script-src-attr 'self' 'unsafe-hashes' 'sha256-bwK6T5wZVTANitXbrTsel7kl/PyCjCd/Dq5Qoz3imjM='; style-src 'self' https: 'unsafe-inline' images.admiralcloud.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' player.admiralcloud.com https://errors.dkd.de; upgrade-insecure- strict-transport-security
max-age=15552000; includeSubDomains- cross-origin-opener-policy
same-origin