lisavienna.at
HTML metadata
Technology
- Server
- Apache
- Social widgets
-
- YouTube Embed
Third-party hosts loaded (1)
- www.youtube-nocookie.com×1
Social
Contact
DNS records live
- NS
-
- ns1.easyname.eu
- ns2.easyname.eu
- MX
-
- 0 lisavienna-at.mail.protection.outlook.com
- TXT
-
Show 6 TXT records
35r6l4jrxgkb2j8ksy9qpc8wm6ttq3n3knowbe4-site-verification=3adbf67083727d8500d8076106f6f3498q8v01b935615p34js0dxrglx8tnbg92rjs9ebuubk8v55iq3fl6od7ev4_ey6p3j22e172a0v2pobf7d3qro5d9a1offensity-domain-verification=ce971a8135b6558eb78c53ccae6bf09c2488e4c57101633d2ba6cc928b96d491
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 ip4:212.166.107.181 ip4:168.63.26.27 ip4:168.63.27.43 ip4:62.99.130.186 include:spf.protection.outlook.com include:servers.mcsv.net -allstrict (-all) - DMARC
-
v=DMARC1;p=none;policy: none (monitoring only) - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - k2:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 20 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
SAMEORIGIN- permissions-policy
fullscreen=(self), speaker=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' stats.aws.at cdnjs.cloudflare.com www.google.com www.gstatic.com *.googleapis.com www.youtube.com platform.twitter.com 'nonce-oa8K53gA' 'nonce-Jd84Ajmd5'; style-src 'self' 'unsafe-inline' *.googleapis.com cdnjs.cloudflare.com platform.twitter.com 'nonce-06739b63ad75e4caca45e7418ab337af2c7a919ae1a66574bb7073d367865cf0'; img-src 'self' data: cdnjs.cloudflare.com *.tile.openstreetmap.org stats.aws.at syndication.twitter.com; frame-src www.google.com www.youtube.com www.youtube-nocookie.com platform.twitter.com syndication.twitter.com; font-src 'self' data: fast.fonts.net; connect-src 'self' *.googleapis.com stats.aws.at nominatim.openstreetmap.org api.mapbox.com platform.twitter.com- strict-transport-security
max-age=15768000; includeSubDomains
Links to (10)
Linked from (2)
- shimadzu.at×1
- x-bio.at×1