cryptonow.ch
HTML metadata
Technology
- CDN
- Netlify
- CMS
- Nuxt
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- www.datocms-assets.com×22
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- decker.ns.cloudflare.com
- tess.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- Verified for
-
- Brevo
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.compolicy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwIRmBbqW6gd6S4PpnJGo8PtYYC7MN5DjpoWnSuNxX54/CpZqKu8Hq/HYrr90Wo99FjKgNo/I/+m/y…
selectors probed - google:
Certificate (current)
E8
Expires in 72 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy-report-only
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- missing Content Security Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
DENY- permissions-policy
camera=(), microphone=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=()- x-content-type-options
nosniff- strict-transport-security
max-age=63072000; includeSubDomains; preload- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-origin- content-security-policy-report-only
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://eu-assets.i.posthog.com https://sdk.woosmap.com https://widget.intercom.io https://js.intercomcdn.com wss://nexus-europe-websocket.intercom.io; connect-src 'self' https://graphql.datocms.com https://graphql-listen.datocms.com https://www.googletagmanager.com https://*.google-analytics.com https://www.datocms-assets.com https://app.cryptonow.ch https://feeder.staging.cryptonow.net https://eu.i.posthog.com https://eu-assets.i.posthog.com https://travel.cryptonow.io https://api.woosmap.com https://api-iam.eu.intercom.io; frame-src https://player.vimeo.com https://www.facebook.com https://www.youtube.com https://youtube.com; img-src 'self' data: blob: https://www.datocms-assets.com https://*.imgix.net https://i.ytimg.com https://travel.cryptonow.io https://coin-images.coingecko.com https://coin-images.coingecko.com; font-src 'self' https://sdk.woosmap.com https://fonts.intercom