jobijoba.de
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (16)
- jobijoba.imgix.net×5
- accounts.google.com×1
- sdk.privacy-center.org×1
- www.googletagmanager.com×1
- www.jobijoba.at×1
- www.jobijoba.be×1
- www.jobijoba.ch×1
- www.jobijoba.co.uk×1
- www.jobijoba.com×1
- www.jobijoba.com.br×1
- www.jobijoba.es×1
- www.jobijoba.ie×1
- www.jobijoba.it×1
- www.jobijoba.mx×1
- www.jobijoba.pt×1
- www.jobstralia.com×1
Registration
- Updated
- 2019-03-02
- Name servers
-
- dns13.ovh.net.
- ns13.ovh.net.
DNS records live
- NS
-
- dns13.ovh.net
- ns13.ovh.net
- MX
-
- 1 mx4.mail.ovh.net
- 10 mx3.mail.ovh.net
Email authentication weak
- SPF
-
v=spf1 include:mx.ovh.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 81 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
no-referrer- x-frame-options
DENY- permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(self),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()- x-content-type-options
nosniff- content-security-policy
base-uri 'none'; frame-ancestors 'self'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-rd0eJki+cha/n1mOoY0AHA=='; report-uri https://sentry.jobijoba.io/api/10/security/?sentry_key=f7fdb7ea43674b0889145b92f6d6811e- strict-transport-security
max-age=31536000; includeSubDomains; preload