nimm2.at
HTML metadata
Technology
Third-party hosts loaded (4)
- static.storck.com×15
- logfiles.storck.com×1
- www.nimm2.de×1
- www.nimm2.pl×1
DNS records live
- NS
-
- ns.europe.adacor.net
- ns.global.adacor.net
- ns5.adacor.net
- MX
-
- 10 nimm2-at.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 mx include:spf.protection.outlook.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=reject;pct=100;rua=mailto:dmarc-reporting@storck.compolicy: reject (enforced) - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KhhowMokCRIXRriPzwlerrvSnc2ioSA6yw2yU0XUOaxHd4AVxdAXpGbg/p+bTUV8zHZdbw53/qccW…
selectors probed - selector1:
Certificate (current)
R12
Expires in 52 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
sameorigin- x-content-type-options
nosniff- content-security-policy
base-uri 'self'; default-src 'self' data: *.storck.com; script-src 'self' 'nonce-tU59kXXSXafaNlTo9e92GGUh-RXAJ4-3fG2zff_izJlR5iB_Z6htGQ' blob: data: *.storck.com storck.piwik.pro; img-src 'self' blob: data: *.storck.com storck.piwik.pro; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.storck.com; connect-src 'self' data: *.storck.com storck.piwik.pro; font-src 'self' data:; frame-src 'self' data: gratis-testen.eu int.fe.nimm2-der-sommer-lacht-fe.campaign-loyalty.com prod.fe.nimm2-der-sommer-lacht-fe.campaign-loyalty.com;- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (7)
Linked from (3)
- toffifee.at×1
- merci.at×1
- nimm2.com×1