beautyhills.de
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- jQuery
- 3.7.1
- Analytics
-
- Cloudflare Insights
- Cookie consent
-
- Usercentrics
Third-party hosts loaded (8)
- omnisnippet1.com×2
- static.klaviyo.com×2
- widgets.trustedshops.com×2
- eu1-config.doofinder.com×1
- gmpg.org×1
- integrations.etrusted.com×1
- static.cloudflareinsights.com×1
- web.cmp.usercentrics.eu×1
Registration
- Updated
- 2021-10-07
- Name servers
-
- ns73.domaincontrol.com.
- ns74.domaincontrol.com.
DNS records live
- NS
-
- ns73.domaincontrol.com
- ns74.domaincontrol.com
- MX
-
- 50 beautyhills-de.mail.protection.outlook.com
- TXT
-
klaviyo-site-verification=TVtAdkcuttly-verification-site-5c9f4db2612a176d3e0c169640023085a63d5cd0-7d35dcd396
- Verified for
-
- Brevo
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com include:spf.qualityclick.com include:sendgrid.net include:mailgun.org ip4:87.230.41.117 -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=86400policy: none (monitoring only) · sp=none - DKIM
-
Show 4 DKIM selectors
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAJaIZR9QJmGxFUpIx9BXXqkETJwYXB9ted/CzE45a0gOHTEY5ilc52d8j2Zdjn8VnWl6Z+LD3Ctf0B4pG… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ue0zMPZJ/bEWV53b5Llw1MB/haIuq/fXSe9wVhfubPjVDSPc2ddZz7vJu3SysNRR4y8ZpYWgp3S1H1ZVC…
selectors probed - k2:
Certificate (current)
WE1
Expires in 70 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' data: blob: https:; worker-src 'self' blob:; upgrade-insecure-requests; block-all-mixed-content- strict-transport-security
max-age=31536000