global2000.at
HTML metadata
Technology
- CMS
- Drupal
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
Contact
- Phone
- Address
- Neustiftgasse 36, 1070, Wien, Wien, Austria
DNS records live
- NS
-
- ns1.nameservice.at
- ns2.nameservice.at
- MX
-
- 10 in01.global2000.at
- 15 out.global2000.at
- 20 in02.global2000.at
- 30 in03.global2000.at
- TXT
-
zone-ownership-verification-d986215ed22ee79f0c4e46416ac7449d327841749dab3cb4d5e0b7acc5260ca3
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 mx -allstrict (-all) - DMARC
-
v=DMARC1; p=nonepolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 84 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak content type protection
- missing Referrer Policy
Header values
- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), microphone=(), payment=(), usb=()- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self' 'unsafe-inline' data: global2000.at *.global2000.at https://*.google-analytics.com https://*.google.com https://*.google.at https://*.doubleclick.net https://*.youtube.com https://youtu.be https://*.ytimg.com https://*.facebook.com https://*.vimeocdn.com https://vimeo.com https://*.vimeo.com https://*.hotjar.com https://*.ubembed.com https://*.restorenature.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' global2000.at *.global2000.at https://*.youtube.com https://*.googletagmanager.com https://*.google-analytics.com https://*.hotjar.com https://*.facebook.net https://*.g.doubleclick.net https://*.ubembed.com https://*.googleadservices.com https://*.twitter.com https://*.google.com https://*.google.at https://widget.proca.app https://static.d-o.li https://cdn.growify.ai; object-src 'self' global2000.at *.global2000.at 'unsafe-inline'; style-src 'self' 'unsafe-inline' *.global2000.at; img-src 'self' *.global2000.at data: https://*.google.com https:- strict-transport-security
max-age=31536000; includeSubDomains- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
cross-origin