euraxess.es
HTML metadata
Technology
- CDN
- Amazon CloudFront
- CMS
- Drupal
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (1)
- webtools.europa.eu×2
DNS records live
- NS
-
- ns03.ns-cloud4b.net
- ns05.ns-cloud4b.org
- ns06.ns-cloud4b.com
- MX
-
- 0 euraxess-es.mail.protection.outlook.com
Email authentication weak
- SPF
-
v=spf1 ip4:168.245.29.58 ip4:82.144.103.50 ip4:82.144.103.51 ip4:5.56.62.219 include:spf.protection.outlook.com -allstrict (-all) - DMARC
- not published
- DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCRd8y14OrIIo2WaQx2lwwT0coyio7ttE4zMdqGPzYf+JUMaRjHy1jOIgYA9ZIa49BBJJ2HS1rcinVgsjb28O… - selector2:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJr7V3YCIPaPJJefwN9SHStC9uuQ7xKaaa5Omh2eBWh1GHD4CYZBUKfLGcpu1UUbFRhiKE1vclLfSEevkBa7…
selectors probed - selector1:
Certificate (current)
Amazon RSA 2048 M03
Expires in 65 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' data: platform.twitter.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' ec.europa.eu webtools.europa.eu webtools.ec.europa.eu *.webanalytics.europa.eu webanalytics.europa.eu *.euraxess.org europa.eu ec.europa.eu euraxess.eventiotic.com webanalytics.ec.europa.eu *.google-analytics.com www.google-analytics.com google-analytics.com analytics.pt-dlr.de matomo.dlr-pt.de stats.swissuniversities.ch connect.facebook.net platform.twitter.com ajax.googleapis.com unilu.matomo.cloud piwik.euraxess.at cdn1.euraxess.org cdn2.euraxess.org cdn3.euraxess.org cdn4.euraxess.org cdn5.euraxess.org www.gstatic.com gstatic.com static.dialogflow.com https://cdnjs.cloudflare.com/ajax/libs/video.js/5.20.4/video.js https://cdn.jsdelivr.net/npm/vue@2/dist/vue.js https://code.jquery.com/jquery-3.6.0.min.js https://code.jquery.com/jquery-3.6.0.js https://code.jquery.com/ui/1.12.1/jquery-ui.js https://unpkg.com/leaflet@1.7.1/dist/leaflet.js https://stamen-maps.a.ssl.fastly.net/js/tile.stam- strict-transport-security
max-age=31536000; includeSubDomains; preload;