mylpg.eu
HTML metadata
Technology
- Server
- LiteSpeed
- PHP
- 7.4.33 end of life
- jQuery
- 3.6.0
Third-party hosts loaded (3)
- cdn.jsdelivr.net×2
- code.jquery.com×1
- matvoz.com×1
Social
DNS records live
- NS
-
- ns23.neoserv.si
- ns24.neoserv.si
- MX
-
- 0 mail.mylpg.eu
Email authentication strong
- SPF
-
v=spf1 ip4:152.89.234.35 ip4:152.89.234.252 ip4:152.89.234.38 ip4:91.223.182.197 ip4:91.223.182.202 include:_spf.mail-neoserv.si include:spf.squalomail.com +a +mx ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=quarantine;sp=quarantine;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:matija@matvoz.com;ruf=mailto:matija@matvoz.compolicy: quarantine · sp=quarantine - DKIM
-
- default:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw8Ut6diWDQ5lt5TKaFbYymo/4o7TwYimc4hbMYoUsODUoSJ0JdS4Dr/y8NAgltag7gjgQyiEncJMj…
selectors probed - default:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 246 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(self), camera=(), microphone=(), payment=(), usb=(), fullscreen=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://maps.mylpg.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';- strict-transport-security
max-age=63072000; includeSubDomains;