gillettevenus.de
HTML metadata
Technology
- CDN
- Azure Front Door
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- images.ctfassets.net×6
- match.adsrvr.org×1
- pghub.io×1
- www.googletagmanager.com×1
Social
Registration
- Updated
- 2024-12-11
- Name servers
-
- ns1-01.azure-dns.com.
- ns2-01.azure-dns.net.
- ns3-01.azure-dns.org.
- ns4-01.azure-dns.info.
DNS records live
- NS
-
- ns1-01.azure-dns.com
- ns2-01.azure-dns.net
- ns3-01.azure-dns.org
- ns4-01.azure-dns.info
- TXT
-
Show 4 TXT records
google-site-verification=hyoE7iM351ZYrdE_xDpIp2vtjROy5p9DLK3OGkLqvF07952-066E-6D99-D081-1E26-7E52-12DE-C56Fgillette-venus-de-de-01.azurewebsites.netgoogle-site-verification=5VOQhMSukXi0_gvXAY0olY-mQRs-0Jjl-9RbIwUWTvk
Email authentication no MX
- SPF
- not published
- DMARC
-
v=DMARC1; p=none; fo=1; ri=3600; rua=mailto:procter-gamble@rua.dmp.cisco.com; ruf=mailto:procter-gamble@ruf.dmp.cisco.compolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA OV R40
Expires in 144 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pghub.io https://www.google.com/recaptcha/api.js https://www.gstatic.com cdn.cookielaw.org *.iesnare.com connect.facebook.net *.crazyegg.com *.adsrvr.org *.bazaarvoice.com *.google-analytics.com *.googletagmanager.com blob:; style-src 'self' 'unsafe-inline' *.bazaarvoice.com fonts.googleapis.com; media-src 'self' videos.ctfassets.net *.iesnare.com data:; img-src 'self' *.cookielaw.org images.ctfassets.net pixel.tapad.com *.bazaarvoice.com *.google-analytics.com www.facebook.com *.googletagmanager.com data:; font-src 'self' fonts.gstatic.com; connect-src * https://pglogin.justsnap.de https://venus.jsnp.io; frame-src 'self' *.googletagmanager.com https://pglogin.justsnap.de https://venus.jsnp.io https://www.google.com https://servedby.flashtalking.com *.adsrvr.org *.doubleclick.net *.jebbit.com consumersupport.pg.com pg-lex.my.salesforce-sites.com ct.pinterest.com www.facebook.com; manifest-src *- strict-transport-security
max-age=31536000; includeSubdomains
Links to (6)
- cosmopolitan.com×2
- facebook.com×2
- instagram.com×2
- pg.com×2
- x.com×2
- youtube.com×2
Linked from (1)
- braun.de×2