leviat.com
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
Third-party hosts loaded (1)
- eadn-wc01-15894695.nxedge.io×64
Social
Registration
- Registrar
- Combell NV
- Created
- 2010-04-03
- Expires
- 2027-04-03 319 days left
- Updated
- 2026-03-22
- Name servers
-
- ns1.combell.eu
- ns3.combell.net
- ns4.combell.net
DNS records live
- NS
-
- ns1.combell.eu
- ns3.combell.net
- ns4.combell.net
- MX
-
- 5 mxa-00344903.gslb.pphosted.com
- 5 mxb-00344903.gslb.pphosted.com
- TXT
-
apple-domain-verification=SIdFzF0YCig70aAwgoogle-site-verification=wnqsth3LA9Ix2ktAEpcJYQzZx5DAUNo_sAXv7h4ZYSk
Email authentication strong
- SPF
-
v=spf1 ip4:185.145.13.110 ip4:149.72.190.137 include:_spf.leviat.com include:_spf.crh.com include:usermail.zohocreator.com include:eu._netblocks.mimecast.com include:spf.afas.online include:_spf.salesforce.com -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) - DKIM
-
Show 5 DKIM selectors
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyxR7ZOPyNTGtvj4mt9pMo18zImH6mCIJq/t3fogAP4Th9sh7jAVwd5jezeVQk9uiT/Zr9JKKj6ujM… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmW4c9dEXx+our8L2QFvwWEOIiMCF7LF2Ocy3PsltlkD81XcwXLSPbsoicUrYZm/hqriSlDGVc696CsDem… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDPN6UjtPLn7h2j4hbt0fo67U19sEdplM11S7L3fQ4xjLV7D6bCQwPh+6DnisDs8eIzjdIpAGfMnH3df0W…
selectors probed - selector1:
Certificate (current)
R13
Expires in 32 days
HTTP security headers
- present
-
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- missing HSTS
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN, SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
font-src *.gstatic.com *.cloudinary.com *.nxedge.io *.piwik.pro https://eadn-wc01-15894695.nxedge.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com cloudinary.com *.cloudinary.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal
Links to (2)
- crh.com×2
- linkedin.com×2