capitalatwork.com

HTML metadata

Title

Home - CapitalatWork

Description

Over 35 years of wealth management expertise in Luxembourg. Discover a human, transparent and high-performing approach to grow your capital

Language

en-LU

Generator

WordPress 6.9.4

Canonical

https://www.capitalatwork.com/en-lu/home/

Translations

en ×3
nl ×3
fr ×2
de

Feeds

CapitalatWork » Feed RSS
CapitalatWork » Comments Feed RSS

Open Graph

url: https://www.capitalatwork.com/en-lu/home/
title: Home
locale: en_LU
site name: CapitalatWork
description: Over 35 years of wealth management expertise in Luxembourg. Discover a human, transparent and high-performing approach to grow your capital
locale:alternate: nl_BE

Technology

CMS: WordPress 6.9.4
jQuery: 3.6.0

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (3)

www.google.com×2
consent.cookiebot.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

EuroDNS S.A.

Created

2003-08-16

Expires

2027-08-16 441 days left

Updated

2024-07-17

Name servers

ns1.foyer.lu
ns1.pt.lu

DNS records live

NS

ns1.foyer.lu
ns1.pt.lu

MX

5 mx1.hc1687-84.eu.iphmx.com
5 mx2.hc1687-84.eu.iphmx.com

TXT

knowbe4-site-verification=b709ea518c571be2e4ff8782a21f6538
spf2.0/pra include:spf.flexmail.eu ?all

Verified for

Apple
Atlassian
Cisco
GlobalSign
Google

Email authentication partial

SPF

v=spf1 exists:%{i}.spf.hc1687-84.eu.iphmx.com mx include:mail.iriscloud.lu include:spf.flexmail.eu include:spf.protection.outlook.com ip4:194.154.209.233 include:servers.mcsv.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarcreports@foyer.lu; ruf=mailto:dmarcreports@foyer.lu; fo=1

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

GlobalSign Extended Validation CA - SHA256 - G3

from 2025-06-02 to 2026-07-04

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.capitalatwork.com/en-lu/home/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
strict-transport-security: max-age=15552001
content-security-policy-report-only: default-src 'none'; block-all-mixed-content; child-src 'self'; connect-src 'self' ssowebauth.capitalatwork.com portal.capitalatwork.com www.google.com *.analytics.google.com adservice.google.com stats.addtoany.com yoast.com stats.g.doubleclick.net consentcdn.cookiebot.com; font-src 'self' data: static.foyer.lu ssowebauth.capitalatwork.com www.capitalatwork.com fonts.gstatic.com www.google.com; frame-src 'self' static.addtoany.com www.google.com www.googletagmanager.com platform.linkedin.com consentcdn.cookiebot.com; img-src 'self' data: static.foyer.lu ssoextauth.lefoyer.lu ssowebauth.capitalatwork.com portal.capitalatwork.com googleads.g.doubleclick.net www.google.com www.googletagmanager.com secure.gravatar.com imgsct.cookiebot.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' portal-home.capitalatwork.com portal.capitalatwork.com fonts.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.google.com www.gstatic.com platfo