lexus.fi
HTML metadata
Technology
- Server
- Apache
- Cookie consent
-
- OneTrust
Third-party hosts loaded (30)
- scene7.toyota.eu×25
- cdn.cookielaw.org×3
- de.lexus.ch×1
- fr.lexus.be×1
- fr.lexus.ch×1
- it.lexus.ch×1
- ky.lexus-bishkek.kg×1
- kz.lexuskz.com×1
- nl.lexus.be×1
- ru.chisinau.md.lexus×1
- ru.lexuskz.com×1
- rum.hlx.page×1
- www.chisinau.md.lexus×1
- www.lexus-bishkek.kg×1
- www.lexus-polska.pl×1
- www.lexus.am×1
- www.lexus.at×1
- www.lexus.az×1
- www.lexus.bg×1
- www.lexus.co.il×1
- www.lexus.co.uk×1
- www.lexus.com.cy×1
- www.lexus.com.tr×1
- www.lexus.cz×1
- www.lexus.de×1
- www.lexus.dk×1
- www.lexus.ee×1
- www.lexus.eu×1
- www.lexus.fr×1
- www.lexus.gr×1
Social
DNS records live
- NS
-
- ns1-fin.global.sonera.fi
- ns1-swe.global.sonera.se
- ns2-fin.global.sonera.fi
- ns2-usa.global.sonera.net
- MX
-
- 10 lexus-fi.mail.protection.outlook.com
- TXT
-
Show 8 TXT records
29CA-24A2-4B07-42A2-8177-2F7B-FE6C-09AFlucid-verification=aaAgWBHE6H2H8VByHeWdRvw954s0b731n4c38m8t65w0lvlmq75vcr9wmsfpkey=6dp43jv4iy4gsceifiqqiavke_qyli4w3ubndwmywrzm0mtg3paefkdz7_342u5brr3vlyau9xpsnyenvr9z4rj9evxdt6hnmmd0qhz4tv8gb2cqq73l4m6n1_n09y9xg990bgdnyh0jeag59czwrrs4f
- Verified for
-
- Meta
Email authentication strong
- SPF
-
v=spf1 include:_spf.lexus_fi._d.easydmarc.pro -allstrict (-all) - DMARC
-
v=DMARC1;p=reject;sp=none;pct=100;rua=mailto:421e6a9834@rua.easydmarc.eu,mailto:mailsecurity@toyota.fi;policy: reject (enforced) · sp=none - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD1Xg7EkJivB/Ei+Vve325FVT5JizeKa31bHJLJPue1aUGJNQAgxUyRdo5ZzzJLaJ5RCasDqVgnW8t…
selectors probed - selector1:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 110 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' data: http://smartimaging.scene7.com wss: https: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'self' blob:; img-src 'self' blob: data: https:; font-src 'self' data: https:; worker-src 'self' 'unsafe-inline' * blob:; child-src 'self' https: blob: data:;, frame-ancestors 'self' https://*.lexus.fi https://webvisor.com https://lexus-dxp.dobit.com https://lexustest.dobit.com http://localhost:88;- strict-transport-security
max-age=31536000 ; includeSubDomains