nviso.eu
HTML metadata
Technology
- CDN
- Vercel
- CMS
- WordPress
- Social widgets
-
- Vimeo Embed
Third-party hosts loaded (3)
- newnviso.wpcomstaging.com×12
- player.vimeo.com×2
- cdnjs.cloudflare.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns1-08.azure-dns.com
- ns2-08.azure-dns.net
- ns3-08.azure-dns.org
- ns4-08.azure-dns.info
- MX
-
- 0 nviso-eu.mail.protection.outlook.com
- TXT
-
Show 6 TXT records
MS=ms23740287atlassian-domain-verification=RcMUkvxveW1/oue5uy2WSSxTdPsfaUjg9QXuRtn27ztD0/zLExKdNOaPoOxBmARBv=spf1 include:spf.protection.outlook.com include:spf.ionbiz.com -allgoogle-site-verification=gSgEbZ645SzalBlDojdMAMhcSw6EHlHJesNtff-kdDUgoogle-site-verification=_Uuoup1AEo-2EwlO95gItn3oN5yQVi3OVLW2MjtyA3AHrG46autLY8agMlnNQa9fIOehSs7yKIV
Certificate (current)
R12
Expires in 67 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
DENY- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.cloudflare.com *.wp.com *.vimeo.com *.wpcomstaging.com *.polyfill.io polyfill.io *.piwik.pro *.akamai.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.gstatic.com *.googletagmanager.com *.vercel.app *.vercel.live; font-src 'self' fonts.googleapis.com fonts.gstatic.com;- strict-transport-security
max-age=63072000; includeSubDomains; preload