cargolifter.com
HTML metadata
Technology
- Server
- nginx
Third-party hosts loaded (1)
- statistics.awit.biz×1
Social
Contact
- Phone
Registration
- Registrar
- Cronon GmbH
- Created
- 1996-08-09
- Expires
- 2026-08-08 80 days left
- Updated
- 2025-08-09
- Name servers
-
- ns3.stratoserver.net
- ns4.stratoserver.net
DNS records live
- NS
-
- ns3.stratoserver.net
- ns4.stratoserver.net
- MX
-
- 10 clgroup.cargolifter.biz
Email authentication weak
- SPF
-
v=spf1 ip4:85.215.117.34 ip4:81.169.153.31 ip6:2A01:239:0:95::1 mx a:cargolifter.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- default:
v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAJJzx1FkL1YFxPSaiws19tHnaU0IeQ0ILWneoZ1bdThnQQtX4Hj+C4z9nbTfiV6vI6iVHY56Vq7NouSW7y/Jg/sQf9…
selectors probed - default:
Certificate (current)
R13
Expires in 44 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'nonce-E2GRwG32l_yfX1aSy4Z58QKi96-xWWgml9d1EpDnLmg8ou0ldLOaOQ' https://cdn.jsdelivr.net https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://*.soundcloud.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://*.soundcloud.com; style-src-elem 'self' 'nonce-E2GRwG32l_yfX1aSy4Z58QKi96-xWWgml9d1EpDnLmg8ou0ldLOaOQ' 'unsafe-inline' https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://*.soundcloud.com 'report-sample'; media-src 'self' blob: https:; worker-src 'self' 'nonce-E2GRwG32l_yfX1aSy4Z58QKi96-xWWgml9d1EpDnLmg8ou0ldLOaOQ' blob: 'report-sample'; connect-src 'self' blob: https:; object-src 'self' blob:; child-src 'self' blob:; script-src-elem 'self' 'nonce-E2GRwG32l_yfX1aSy