lte-group.eu
HTML metadata
Technology
- Server
- Apache
Social
Contact
DNS records live
- NS
-
- ns1.nameservice.at
- ns2.nameservice.at
- MX
-
- 0 ltegroup-eu0i.mail.protection.outlook.com
- TXT
-
apple-domain-verification=LnieWCyDkWzCRwM7atlassian-sending-domain-verification=8480dc8a-3a9e-4f11-a3d0-f43a4f051585
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com include:spf.protection.artware.at include:_spf.salesforce.com ip4:157.90.29.70 ip6:2a01:4f8:c2c:b894::1 -allstrict (-all) - DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc-check@gkb.at; ruf=mailto:dmarc-check@gkb.at; fo=1policy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfaDOaQzsxKzdY9HFofVoteSR9cimRyFJoDffD0jGbDGPoBFg9/r3ju6ltB7RA56UZ6K6tVj0nt30a72mYT6…
selectors probed - selector1:
Certificate (current)
R12
Expires in 74 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- weak content type protection
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN, sameorigin- permissions-policy
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),payment=()- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ytimg.com *.getclicky.com getclicky.com static.getclicky.com clicky.com *.googletagmanager.com googletagmanager.com *.googleapis.com googleapis.com *.google.com google.com *.gstatic.com gstatic.com *.google-analytics.com google-analytics.com google.at *.google.at google.de *.google.de google.ch *.google.ch stats.g.doubleclick.net vimeo.com *.vimeo.com *.youtube.com youtube.com *.youtu.be youtu.be youtube-nocookie.com *.youtube-nocookie.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.ytimg.com *.googleapis.com *.gstatic.com static.getclicky.com *.youtube.com youtube.com *.youtu.be youtu.be youtube-nocookie.com *.youtube-nocookie.com *.myfonts.net;font-src 'self' data: *.googleapis.com *.gstatic.com *.youtube.com youtube.com *.youtu.be youtu.be youtube-nocookie.com *.youtube-nocookie.com;img-src 'self' 'unsafe-inline' data: *.ytimg.com *.youtube.com youtube.com *.youtu.be youtu.be youtube-nocookie.com *.youtube-noc- strict-transport-security
max-age=31536000; includeSubDomains; preload, max-age=31536000