memority.eu
HTML metadata
Technology
- Server
- Caddy
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
DNS records live
- NS
-
- dns113.ovh.net
- ns113.ovh.net
- TXT
-
Show 5 TXT records
_otfw6s2ywhvfcjws0l00p5rzni3c8r2_qufr3gyw8e6ptoppbzx549939wpnjy6brevo-code:740cb97d389f66ce765a1d027601ea2cgoogle-site-verification=PbhnZW4kyELsBn5KeKDcGeFjQbKFpKtX2-YbfTcHJ4kv=spf1include:mx.ovh.com-all
Email authentication no MX
- SPF
-
v=spf1include:mx.ovh.com-allno all qualifier - DMARC
-
v=DMARC1;p=reject;fo=1;rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc-rua-d3@accenture.com,mailto:rua@dmarc.brevo.com;ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:dmarc-ruf-d3@accenture.compolicy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 36 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.axept.io https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.axept.io https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.axept.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://static.axept.io https://cdn.matomo.cloud https://js.hs-scripts.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://static.axept.io https://cdn.matomo.cloud https://js.hs-scripts.com https://static.hsappstatic.net; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.googletagmanager.com https://player.vimeo.com https://global.frcapi.com https://*.hubspot.com; media-src 'self' blob: https:; worker-src 'self' blob:- strict-transport-security
max-age=300; includeSubDomains; preload